The use of cookies with an oversized header value can lead to a denial-of-service (DoS) type of condition, where the user is rejected access to a domain. Bogdan Calin from Acunetix, a company that provides website security solutions, has found that if a server is sent cookies with a large header line it rejects the requests and returns the 400 Bad Request error code; some web servers return the 413 Request Entity Too Large error. The server also informs of the rea…
Comments are closed.
