{"id":476474,"date":"2023-08-09T07:29:55","date_gmt":"2023-08-09T07:29:55","guid":{"rendered":""},"modified":"2023-09-05T11:12:51","modified_gmt":"2023-09-05T11:12:51","slug":"crlf-injection","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/in\/wiki\/crlf-injection\/","title":{"rendered":"\u0938\u0940\u0906\u0930\u090f\u0932\u090f\u092b \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928"},"content":{"rendered":"<p>CRLF \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928, \u0915\u0948\u0930\u093f\u091c \u0930\u093f\u091f\u0930\u094d\u0928 \u0932\u093e\u0907\u0928 \u092b\u0940\u0921 \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u0915\u093e \u0938\u0902\u0915\u094d\u0937\u093f\u092a\u094d\u0924 \u0928\u093e\u092e \u0939\u0948, \u091c\u094b \u0935\u0947\u092c \u090f\u092a\u094d\u0932\u093f\u0915\u0947\u0936\u0928 \u0915\u0940 \u0938\u0941\u0930\u0915\u094d\u0937\u093e \u092e\u0947\u0902 \u092d\u0947\u0926\u094d\u092f\u0924\u093e \u0915\u093e \u090f\u0915 \u0930\u0942\u092a \u0939\u0948\u0964 \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u090f\u0915 \u0915\u094b\u0921 \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u0924\u0915\u0928\u0940\u0915 \u0939\u0948 \u091c\u093f\u0938\u092e\u0947\u0902 CRLF \u0905\u0928\u0941\u0915\u094d\u0930\u092e\u094b\u0902 \u0915\u094b \u0915\u093f\u0938\u0940 \u090f\u092a\u094d\u0932\u093f\u0915\u0947\u0936\u0928 \u092f\u093e \u0935\u0947\u092c\u0938\u093e\u0907\u091f \u092e\u0947\u0902 \u0918\u0941\u0938\u092a\u0948\u0920 \u0915\u0930\u0928\u093e \u0936\u093e\u092e\u093f\u0932 \u0939\u0948\u0964 \u092f\u0939 \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u092e\u0941\u0916\u094d\u092f \u0930\u0942\u092a \u0938\u0947 HTTP \u0939\u0947\u0921\u0930 \u0915\u094b \u092a\u094d\u0930\u092d\u093e\u0935\u093f\u0924 \u0915\u0930\u0924\u093e \u0939\u0948 \u0914\u0930 HTTP \u0930\u093f\u0938\u094d\u092a\u0949\u0928\u094d\u0938 \u0938\u094d\u092a\u094d\u0932\u093f\u091f\u093f\u0902\u0917, \u0915\u094d\u0930\u0949\u0938-\u0938\u093e\u0907\u091f \u0938\u094d\u0915\u094d\u0930\u093f\u092a\u094d\u091f\u093f\u0902\u0917 (XSS) \u0914\u0930 \u0905\u0928\u094d\u092f \u091c\u0948\u0938\u0947 \u0935\u093f\u092d\u093f\u0928\u094d\u0928 \u0916\u0924\u0930\u094b\u0902 \u0915\u094b \u091c\u0928\u094d\u092e \u0926\u0947 \u0938\u0915\u0924\u093e \u0939\u0948\u0964<\/p>\n<h2>\u0938\u0940\u0906\u0930\u090f\u0932\u090f\u092b \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u0915\u0940 \u0909\u0924\u094d\u092a\u0924\u094d\u0924\u093f \u0914\u0930 \u0910\u0924\u093f\u0939\u093e\u0938\u093f\u0915 \u092a\u0943\u0937\u094d\u0920\u092d\u0942\u092e\u093f<\/h2>\n<p>&#039;\u0938\u0940\u0906\u0930\u090f\u0932\u090f\u092b \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928&#039; \u0936\u092c\u094d\u0926 HTTP \u092a\u094d\u0930\u094b\u091f\u094b\u0915\u0949\u0932 \u091c\u093f\u0924\u0928\u093e \u0939\u0940 \u092a\u0941\u0930\u093e\u0928\u093e \u0939\u0948, \u091c\u093f\u0938\u0915\u0940 \u0909\u0924\u094d\u092a\u0924\u094d\u0924\u093f \u0907\u0902\u091f\u0930\u0928\u0947\u091f \u0915\u0947 \u0936\u0941\u0930\u0941\u0906\u0924\u0940 \u0926\u093f\u0928\u094b\u0902 \u0938\u0947 \u0939\u0941\u0908 \u0939\u0948\u0964 \u0938\u0940\u0906\u0930\u090f\u0932\u090f\u092b \u0905\u0928\u0941\u0915\u094d\u0930\u092e (\u091c\u093f\u0938\u0947 \u0906\u0930\u090f\u0928 \u0915\u0947 \u0930\u0942\u092a \u092e\u0947\u0902 \u0926\u0930\u094d\u0936\u093e\u092f\u093e \u091c\u093e\u0924\u093e \u0939\u0948) \u0915\u093e \u0909\u092a\u092f\u094b\u0917 \u0915\u0908 \u092a\u094d\u0930\u094b\u0917\u094d\u0930\u093e\u092e\u093f\u0902\u0917 \u092d\u093e\u0937\u093e\u0913\u0902 \u092e\u0947\u0902 \u0928\u0908 \u0932\u093e\u0907\u0928 (\u092a\u0902\u0915\u094d\u0924\u093f \u0915\u0947 \u0905\u0902\u0924) \u0915\u094b \u0926\u0930\u094d\u0936\u093e\u0928\u0947 \u0915\u0947 \u0932\u093f\u090f \u0915\u093f\u092f\u093e \u091c\u093e\u0924\u093e \u0939\u0948\u0964 \u092f\u0939 \u091f\u093e\u0907\u092a\u0930\u093e\u0907\u091f\u0930 \u0915\u0947 \u0938\u092e\u092f \u0938\u0947 \u0932\u093f\u092f\u093e \u0917\u092f\u093e \u0939\u0948, \u091c\u0939\u093e\u0902 &#039;\u0915\u0948\u0930\u093f\u091c \u0930\u093f\u091f\u0930\u094d\u0928&#039; (\u0938\u0940\u0906\u0930) \u0921\u093f\u0935\u093e\u0907\u0938 \u0915\u0940 \u0938\u094d\u0925\u093f\u0924\u093f \u0915\u094b \u0932\u093e\u0907\u0928 \u0915\u0940 \u0936\u0941\u0930\u0941\u0906\u0924 \u092e\u0947\u0902 \u0930\u0940\u0938\u0947\u091f \u0915\u0930 \u0926\u0947\u0924\u093e \u0925\u093e, \u091c\u092c\u0915\u093f &#039;\u0932\u093e\u0907\u0928 \u092b\u0940\u0921&#039; (\u090f\u0932\u090f\u092b) \u0907\u0938\u0947 \u090f\u0915 \u0932\u093e\u0907\u0928 \u0928\u0940\u091a\u0947 \u0932\u0947 \u091c\u093e\u0924\u093e \u0925\u093e\u0964<\/p>\n<p>\u0907\u0938\u0915\u0947 \u0926\u0941\u0930\u0941\u092a\u092f\u094b\u0917, \u092f\u093e &quot;\u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928&quot; \u0915\u093e \u092a\u0939\u0932\u093e \u0909\u0932\u094d\u0932\u0947\u0916 1990 \u0915\u0947 \u0926\u0936\u0915 \u0915\u0947 \u0905\u0902\u0924 \u0914\u0930 2000 \u0915\u0947 \u0926\u0936\u0915 \u0915\u0947 \u092a\u094d\u0930\u093e\u0930\u0902\u092d \u092e\u0947\u0902 \u092e\u093f\u0932\u0924\u093e \u0939\u0948, \u091c\u092c \u0935\u0947\u092c \u0905\u0928\u0941\u092a\u094d\u0930\u092f\u094b\u0917 \u0905\u0927\u093f\u0915 \u091c\u091f\u093f\u0932 \u0939\u094b \u0917\u090f \u0914\u0930 \u0938\u0941\u0930\u0915\u094d\u0937\u093e \u0915\u0940 \u0938\u092e\u091d \u0935\u093f\u0915\u0938\u093f\u0924 \u0939\u094b\u0928\u0947 \u0932\u0917\u0940\u0964<\/p>\n<h2>\u0938\u0940\u0906\u0930\u090f\u0932\u090f\u092b \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u092a\u0930 \u0917\u0939\u0928 \u0905\u0927\u094d\u092f\u092f\u0928<\/h2>\n<p>CRLF \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 CRLF \u0905\u0928\u0941\u0915\u094d\u0930\u092e \u0915\u093e \u090f\u0915 \u0939\u0947\u0930\u092b\u0947\u0930 \u0939\u0948 \u091c\u094b \u0935\u0947\u092c \u090f\u092a\u094d\u0932\u093f\u0915\u0947\u0936\u0928 \u0914\u0930 \u0938\u0930\u094d\u0935\u0930 \u0926\u094d\u0935\u093e\u0930\u093e \u0921\u0947\u091f\u093e \u0915\u094b \u0938\u0902\u0938\u093e\u0927\u093f\u0924 \u0915\u0930\u0928\u0947 \u0915\u0947 \u0924\u0930\u0940\u0915\u0947 \u0915\u093e \u0932\u093e\u092d \u0909\u0920\u093e\u0928\u0947 \u0915\u0947 \u0932\u093f\u090f \u0915\u093f\u092f\u093e \u091c\u093e\u0924\u093e \u0939\u0948\u0964 \u0905\u092a\u094d\u0930\u0924\u094d\u092f\u093e\u0936\u093f\u0924 CRLF \u0905\u0928\u0941\u0915\u094d\u0930\u092e\u094b\u0902 \u0915\u094b \u0907\u0902\u091c\u0947\u0915\u094d\u091f \u0915\u0930\u0915\u0947, \u090f\u0915 \u0939\u092e\u0932\u093e\u0935\u0930 \u090f\u092a\u094d\u0932\u093f\u0915\u0947\u0936\u0928 \u0915\u0947 \u0921\u0947\u091f\u093e \u092a\u094d\u0930\u0935\u093e\u0939 \u092e\u0947\u0902 \u0939\u0947\u0930\u092b\u0947\u0930 \u0915\u0930 \u0938\u0915\u0924\u093e \u0939\u0948, \u091c\u093f\u0938\u0938\u0947 \u0938\u0941\u0930\u0915\u094d\u0937\u093e \u0909\u0932\u094d\u0932\u0902\u0918\u0928 \u0939\u094b \u0938\u0915\u0924\u093e \u0939\u0948\u0964<\/p>\n<p>\u090f\u0915 \u0938\u093e\u092e\u093e\u0928\u094d\u092f CRLF \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u0939\u092e\u0932\u0947 \u092e\u0947\u0902 \u0935\u0947\u092c \u090f\u092a\u094d\u0932\u093f\u0915\u0947\u0936\u0928 \u092e\u0947\u0902 \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e \u0907\u0928\u092a\u0941\u091f \u092b\u093c\u0940\u0932\u094d\u0921 \u092e\u0947\u0902 CRLF \u0905\u0928\u0941\u0915\u094d\u0930\u092e \u091c\u094b\u0921\u093c\u0928\u093e \u0936\u093e\u092e\u093f\u0932 \u0939\u094b \u0938\u0915\u0924\u093e \u0939\u0948 \u0924\u093e\u0915\u093f \u090f\u092a\u094d\u0932\u093f\u0915\u0947\u0936\u0928 \u0915\u094b \u092f\u0939 \u0938\u094b\u091a\u0928\u0947 \u0915\u0947 \u0932\u093f\u090f \u0927\u094b\u0916\u093e \u0926\u093f\u092f\u093e \u091c\u093e \u0938\u0915\u0947 \u0915\u093f \u090f\u0915 \u0928\u0908 \u0932\u093e\u0907\u0928 \u0936\u0941\u0930\u0942 \u0939\u094b \u0917\u0908 \u0939\u0948\u0964 HTTP \u0939\u0947\u0921\u0930 \u092e\u0947\u0902, \u091c\u094b \u0907\u0902\u091f\u0930\u0928\u0947\u091f \u092a\u0930 \u0938\u0902\u091a\u093e\u0930 \u0915\u093e \u090f\u0915 \u0905\u0928\u093f\u0935\u093e\u0930\u094d\u092f \u0939\u093f\u0938\u094d\u0938\u093e \u0939\u0948\u0902, CRLF \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u0915\u0947 \u092a\u0930\u093f\u0923\u093e\u092e\u0938\u094d\u0935\u0930\u0942\u092a HTTP \u092a\u094d\u0930\u0924\u093f\u0915\u094d\u0930\u093f\u092f\u093e \u0935\u093f\u092d\u093e\u091c\u0928 \u0939\u094b \u0938\u0915\u0924\u093e \u0939\u0948, \u091c\u0939\u093e\u0902 \u090f\u0915 \u0926\u0941\u0930\u094d\u092d\u093e\u0935\u0928\u093e\u092a\u0942\u0930\u094d\u0923 \u0939\u092e\u0932\u093e\u0935\u0930 \u0915\u093f\u0938\u0940 \u0938\u0930\u094d\u0935\u0930 \u0915\u094b \u092a\u0930\u093f\u0935\u0930\u094d\u0924\u093f\u0924 HTTP \u092a\u094d\u0930\u0924\u093f\u0915\u094d\u0930\u093f\u092f\u093e \u092d\u0947\u091c\u0928\u0947 \u0915\u0947 \u0932\u093f\u090f \u0927\u094b\u0916\u093e \u0926\u0947 \u0938\u0915\u0924\u093e \u0939\u0948, \u091c\u093f\u0938\u0938\u0947 \u0938\u0902\u092d\u093e\u0935\u093f\u0924 \u0915\u092e\u091c\u094b\u0930\u093f\u092f\u093e\u0902 \u0939\u094b \u0938\u0915\u0924\u0940 \u0939\u0948\u0902\u0964<\/p>\n<h2>\u0938\u0940\u0906\u0930\u090f\u0932\u090f\u092b \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u0915\u093e \u0906\u0902\u0924\u0930\u093f\u0915 \u0924\u0902\u0924\u094d\u0930<\/h2>\n<p>CRLF \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u0915\u093f\u0938\u0940 \u090f\u092a\u094d\u0932\u093f\u0915\u0947\u0936\u0928 \u0915\u0940 \u0905\u092a\u0947\u0915\u094d\u0937\u093f\u0924 \u0921\u0947\u091f\u093e \u0938\u094d\u091f\u094d\u0930\u0940\u092e \u092e\u0947\u0902 CRLF \u0905\u0928\u0941\u0915\u094d\u0930\u092e\u094b\u0902 \u0915\u094b \u0938\u092e\u094d\u092e\u093f\u0932\u093f\u0924 \u0915\u0930\u0915\u0947 \u0915\u093e\u092e \u0915\u0930\u0924\u093e \u0939\u0948\u0964 \u0910\u0938\u093e \u0915\u0930\u0915\u0947, \u0939\u092e\u0932\u093e\u0935\u0930 \u0938\u093f\u0938\u094d\u091f\u092e \u0915\u094b \u0907\u0928 \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928\u094b\u0902 \u0915\u094b \u0935\u0948\u0927 \u0915\u092e\u093e\u0902\u0921 \u092f\u093e \u0928\u093f\u0930\u094d\u0926\u0947\u0936\u094b\u0902 \u0915\u0947 \u0930\u0942\u092a \u092e\u0947\u0902 \u092a\u0939\u091a\u093e\u0928\u0928\u0947 \u0915\u0947 \u0932\u093f\u090f \u0939\u0947\u0930\u092b\u0947\u0930 \u0915\u0930 \u0938\u0915\u0924\u093e \u0939\u0948\u0964<\/p>\n<p>\u0909\u0926\u093e\u0939\u0930\u0923 \u0915\u0947 \u0932\u093f\u090f, HTTP \u0930\u093f\u0938\u094d\u092a\u093e\u0902\u0938 \u0938\u094d\u092a\u094d\u0932\u093f\u091f\u093f\u0902\u0917 \u0915\u0947 \u092e\u093e\u092e\u0932\u0947 \u092e\u0947\u0902, \u0939\u092e\u0932\u093e\u0935\u0930 \u090f\u0915 \u0938\u094d\u091f\u094d\u0930\u093f\u0902\u0917 \u0907\u0928\u092a\u0941\u091f \u0915\u0930 \u0938\u0915\u0924\u093e \u0939\u0948 \u091c\u093f\u0938\u092e\u0947\u0902 CRLF \u0905\u0928\u0941\u0915\u094d\u0930\u092e \u0936\u093e\u092e\u093f\u0932 \u0939\u0948\u0902 \u091c\u093f\u0938\u0915\u0947 \u092c\u093e\u0926 \u0905\u0924\u093f\u0930\u093f\u0915\u094d\u0924 HTTP \u0939\u0947\u0921\u0930 \u092f\u093e \u0938\u093e\u092e\u0917\u094d\u0930\u0940 \u0939\u0948\u0964 \u0907\u0938\u0938\u0947 \u090f\u092a\u094d\u0932\u093f\u0915\u0947\u0936\u0928 \u0915\u094b \u0932\u0917\u0924\u093e \u0939\u0948 \u0915\u093f \u0939\u0947\u0921\u0930 \u0938\u092e\u093e\u092a\u094d\u0924 \u0939\u094b \u0917\u090f \u0939\u0948\u0902 \u0914\u0930 \u0928\u090f \u0936\u0941\u0930\u0942 \u0939\u094b \u0917\u090f \u0939\u0948\u0902, \u091c\u093f\u0938\u0938\u0947 \u0939\u092e\u0932\u093e\u0935\u0930 \u0915\u094b HTTP \u092a\u094d\u0930\u0924\u093f\u0915\u094d\u0930\u093f\u092f\u093e \u0915\u0947 \u092a\u094d\u0930\u0924\u093f\u0915\u094d\u0930\u093f\u092f\u093e \u0939\u0947\u0921\u0930 \u0915\u094b \u0928\u093f\u092f\u0902\u0924\u094d\u0930\u093f\u0924 \u0915\u0930\u0928\u0947 \u0915\u0940 \u0905\u0928\u0941\u092e\u0924\u093f \u092e\u093f\u0932\u0924\u0940 \u0939\u0948\u0964<\/p>\n<h2>\u0938\u0940\u0906\u0930\u090f\u0932\u090f\u092b \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u0915\u0940 \u092e\u0941\u0916\u094d\u092f \u0935\u093f\u0936\u0947\u0937\u0924\u093e\u090f\u0902<\/h2>\n<p>\u0938\u0940\u0906\u0930\u090f\u0932\u090f\u092b \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u0939\u092e\u0932\u0947 \u0915\u0940 \u092e\u0941\u0916\u094d\u092f \u0935\u093f\u0936\u0947\u0937\u0924\u093e\u090f\u0902 \u0907\u0938 \u092a\u094d\u0930\u0915\u093e\u0930 \u0939\u0948\u0902:<\/p>\n<ol>\n<li>\n<p>\u0938\u0940\u0906\u0930\u090f\u0932\u090f\u092b \u0905\u0928\u0941\u0915\u094d\u0930\u092e\u094b\u0902 \u0915\u093e \u0939\u0947\u0930\u092b\u0947\u0930: \u0938\u0940\u0906\u0930\u090f\u0932\u090f\u092b \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u0915\u0940 \u092a\u094d\u0930\u093e\u0925\u092e\u093f\u0915 \u0935\u093f\u0936\u0947\u0937\u0924\u093e \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e-\u0907\u0928\u092a\u0941\u091f \u092b\u093c\u0940\u0932\u094d\u0921 \u092f\u093e HTTP \u0939\u0947\u0921\u0930 \u092e\u0947\u0902 \u0938\u0940\u0906\u0930\u090f\u0932\u090f\u092b \u0905\u0928\u0941\u0915\u094d\u0930\u092e\u094b\u0902 \u0915\u093e \u0905\u092a\u094d\u0930\u0924\u094d\u092f\u093e\u0936\u093f\u0924 \u091c\u094b\u0921\u093c \u0939\u0948\u0964<\/p>\n<\/li>\n<li>\n<p>\u0921\u0947\u091f\u093e \u092a\u094d\u0930\u0935\u093e\u0939 \u092a\u0930 \u092a\u094d\u0930\u092d\u093e\u0935: \u0907\u0902\u091c\u0947\u0915\u094d\u091f \u0915\u093f\u090f \u0917\u090f CRLF \u0905\u0928\u0941\u0915\u094d\u0930\u092e \u0905\u0928\u0941\u092a\u094d\u0930\u092f\u094b\u0917 \u092e\u0947\u0902 \u0921\u0947\u091f\u093e \u0915\u0947 \u092a\u094d\u0930\u0935\u093e\u0939 \u092e\u0947\u0902 \u0939\u0947\u0930\u092b\u0947\u0930 \u0915\u0930 \u0938\u0915\u0924\u0947 \u0939\u0948\u0902, \u091c\u093f\u0938\u0938\u0947 \u0938\u0902\u092d\u093e\u0935\u093f\u0924 \u0915\u092e\u091c\u094b\u0930\u093f\u092f\u093e\u0902 \u092a\u0948\u0926\u093e \u0939\u094b \u0938\u0915\u0924\u0940 \u0939\u0948\u0902\u0964<\/p>\n<\/li>\n<li>\n<p>\u092a\u094d\u0930\u092d\u093e\u0935 \u0915\u093e \u0926\u093e\u092f\u0930\u093e: \u092f\u0939 \u092d\u0947\u0926\u094d\u092f\u0924\u093e \u0928 \u0915\u0947\u0935\u0932 \u0909\u0938 \u0905\u0928\u0941\u092a\u094d\u0930\u092f\u094b\u0917 \u0915\u094b \u092a\u094d\u0930\u092d\u093e\u0935\u093f\u0924 \u0915\u0930\u0924\u0940 \u0939\u0948 \u091c\u0939\u093e\u0902 \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u0939\u094b\u0924\u093e \u0939\u0948, \u092c\u0932\u094d\u0915\u093f \u0909\u0928 \u0905\u0928\u094d\u092f \u0905\u0928\u0941\u092a\u094d\u0930\u092f\u094b\u0917\u094b\u0902 \u0915\u094b \u092d\u0940 \u092a\u094d\u0930\u092d\u093e\u0935\u093f\u0924 \u0915\u0930\u0924\u0940 \u0939\u0948 \u091c\u094b \u0909\u0938\u0940 \u0921\u0947\u091f\u093e \u0915\u094b \u0921\u093e\u0909\u0928\u0938\u094d\u091f\u094d\u0930\u0940\u092e \u092e\u0947\u0902 \u0938\u0902\u0938\u093e\u0927\u093f\u0924 \u0915\u0930\u0924\u0947 \u0939\u0948\u0902\u0964<\/p>\n<\/li>\n<\/ol>\n<h2>\u0938\u0940\u0906\u0930\u090f\u0932\u090f\u092b \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u0915\u0947 \u092a\u094d\u0930\u0915\u093e\u0930<\/h2>\n<p>\u0938\u0940\u0906\u0930\u090f\u0932\u090f\u092b \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u0915\u0947 \u0926\u094b \u092e\u0941\u0916\u094d\u092f \u092a\u094d\u0930\u0915\u093e\u0930 \u0939\u0948\u0902:<\/p>\n<ol>\n<li>\n<p><strong>HTTP \u092a\u094d\u0930\u0924\u093f\u0915\u094d\u0930\u093f\u092f\u093e \u0935\u093f\u092d\u093e\u091c\u0928<\/strong>: \u092f\u0939 \u0938\u092c\u0938\u0947 \u0906\u092e \u092a\u094d\u0930\u0915\u093e\u0930 \u0939\u0948, \u091c\u0939\u093e\u0902 CRLF \u0905\u0928\u0941\u0915\u094d\u0930\u092e\u094b\u0902 \u0915\u094b HTTP \u092a\u094d\u0930\u0924\u093f\u0915\u094d\u0930\u093f\u092f\u093e \u092e\u0947\u0902 \u0939\u0947\u0930\u092b\u0947\u0930 \u092f\u093e \u0935\u093f\u092d\u093e\u091c\u0928 \u0915\u0930\u0928\u0947 \u0915\u0947 \u0932\u093f\u090f HTTP \u0939\u0947\u0921\u0930 \u092e\u0947\u0902 \u0907\u0902\u091c\u0947\u0915\u094d\u091f \u0915\u093f\u092f\u093e \u091c\u093e\u0924\u093e \u0939\u0948\u0964<\/p>\n<\/li>\n<li>\n<p><strong>\u0932\u0949\u0917 \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928<\/strong>\u0907\u0938 \u092a\u094d\u0930\u0915\u093e\u0930 \u092e\u0947\u0902, \u0932\u0949\u0917 \u092b\u093c\u093e\u0907\u0932\u094b\u0902 \u092e\u0947\u0902 \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u0932\u0917\u093e\u092f\u093e \u091c\u093e\u0924\u093e \u0939\u0948\u0964 \u0939\u092e\u0932\u093e\u0935\u0930 \u0932\u0949\u0917 \u092a\u094d\u0930\u0935\u093f\u0937\u094d\u091f\u093f\u092f\u094b\u0902 \u0915\u094b \u091c\u093e\u0932\u0940 \u092c\u0928\u093e\u0915\u0930 \u092f\u093e \u0926\u0941\u0930\u094d\u092d\u093e\u0935\u0928\u093e\u092a\u0942\u0930\u094d\u0923 \u0938\u093e\u092e\u0917\u094d\u0930\u0940 \u0921\u093e\u0932\u0915\u0930 \u0907\u0938\u0915\u093e \u092b\u093c\u093e\u092f\u0926\u093e \u0909\u0920\u093e \u0938\u0915\u0924\u093e \u0939\u0948\u0964<\/p>\n<\/li>\n<\/ol>\n<h2>\u0938\u0940\u0906\u0930\u090f\u0932\u090f\u092b \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u0915\u0947 \u0905\u0928\u0941\u092a\u094d\u0930\u092f\u094b\u0917, \u0938\u092e\u0938\u094d\u092f\u093e\u090f\u0902 \u0914\u0930 \u0938\u092e\u093e\u0927\u093e\u0928<\/h2>\n<p>\u0938\u0940\u0906\u0930\u090f\u0932\u090f\u092b \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u0915\u093e \u0909\u092a\u092f\u094b\u0917 \u0915\u0908 \u0924\u0930\u0940\u0915\u094b\u0902 \u0938\u0947 \u0926\u0941\u0930\u094d\u092d\u093e\u0935\u0928\u093e\u092a\u0942\u0930\u094d\u0923 \u0924\u0930\u0940\u0915\u0947 \u0938\u0947 \u0915\u093f\u092f\u093e \u091c\u093e \u0938\u0915\u0924\u093e \u0939\u0948, \u091c\u093f\u0938\u092e\u0947\u0902 \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e \u0938\u0924\u094d\u0930\u094b\u0902 \u0915\u094b \u0939\u093e\u0908\u091c\u0948\u0915 \u0915\u0930\u0928\u093e, \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e \u0921\u0947\u091f\u093e \u091a\u0941\u0930\u093e\u0928\u093e, \u0914\u0930 \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e\u0913\u0902 \u0915\u094b \u0926\u0941\u0930\u094d\u092d\u093e\u0935\u0928\u093e\u092a\u0942\u0930\u094d\u0923 \u0938\u094d\u0915\u094d\u0930\u093f\u092a\u094d\u091f \u0928\u093f\u0937\u094d\u092a\u093e\u0926\u093f\u0924 \u0915\u0930\u0928\u0947 \u0915\u0947 \u0932\u093f\u090f \u092a\u094d\u0930\u0947\u0930\u093f\u0924 \u0915\u0930\u0928\u093e \u0936\u093e\u092e\u093f\u0932 \u0939\u0948\u0964<\/p>\n<p>CRLF \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u0939\u092e\u0932\u094b\u0902 \u0915\u094b \u0930\u094b\u0915\u0928\u0947 \u092e\u0947\u0902 \u0907\u0928\u092a\u0941\u091f \u0938\u0924\u094d\u092f\u093e\u092a\u0928 \u0914\u0930 \u0938\u094d\u0935\u091a\u094d\u091b\u0924\u093e \u0936\u093e\u092e\u093f\u0932 \u0939\u0948\u0964 \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e \u0907\u0928\u092a\u0941\u091f \u092b\u093c\u0940\u0932\u094d\u0921 \u092e\u0947\u0902 \u0938\u094d\u0935\u0940\u0915\u093e\u0930 \u0915\u093f\u090f \u091c\u093e \u0938\u0915\u0928\u0947 \u0935\u093e\u0932\u0947 \u0935\u0930\u094d\u0923\u094b\u0902 \u0915\u0947 \u092a\u094d\u0930\u0915\u093e\u0930\u094b\u0902 \u0915\u094b \u0938\u0940\u092e\u093f\u0924 \u0915\u0930\u0915\u0947 \u0914\u0930 \u0905\u092a\u094d\u0930\u0924\u094d\u092f\u093e\u0936\u093f\u0924 CRLF \u0905\u0928\u0941\u0915\u094d\u0930\u092e\u094b\u0902 \u0915\u0947 \u0932\u093f\u090f HTTP \u0939\u0947\u0921\u0930 \u0915\u093e \u0928\u093f\u0930\u0940\u0915\u094d\u0937\u0923 \u0915\u0930\u0915\u0947, \u0906\u092a \u0938\u0902\u092d\u093e\u0935\u093f\u0924 CRLF \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u0915\u094b \u0930\u094b\u0915 \u0938\u0915\u0924\u0947 \u0939\u0948\u0902\u0964<\/p>\n<h2>\u0938\u092e\u093e\u0928 \u0936\u0930\u094d\u0924\u094b\u0902 \u0915\u0947 \u0938\u093e\u0925 \u0924\u0941\u0932\u0928\u093e<\/h2>\n<p>\u091c\u092c\u0915\u093f \u0938\u0940\u0906\u0930\u090f\u0932\u090f\u092b \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u092e\u0941\u0916\u094d\u092f \u0930\u0942\u092a \u0938\u0947 \u0938\u0940\u0906\u0930\u090f\u0932\u090f\u092b \u0905\u0928\u0941\u0915\u094d\u0930\u092e\u094b\u0902 \u092e\u0947\u0902 \u0918\u0941\u0938\u092a\u0948\u0920 \u0938\u0947 \u0928\u093f\u092a\u091f\u0924\u093e \u0939\u0948, \u0905\u0928\u094d\u092f \u0938\u0902\u092c\u0902\u0927\u093f\u0924 \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u0939\u092e\u0932\u094b\u0902 \u092e\u0947\u0902 \u0936\u093e\u092e\u093f\u0932 \u0939\u0948\u0902:<\/p>\n<ol>\n<li>\n<p><strong>\u090f\u0938\u0915\u094d\u092f\u0942\u090f\u0932 \u0907\u0902\u091c\u0947\u0915\u094d\u0937\u0928<\/strong>\u0907\u0938\u092e\u0947\u0902 \u0915\u093f\u0938\u0940 \u090f\u092a\u094d\u0932\u093f\u0915\u0947\u0936\u0928 \u092e\u0947\u0902 \u0926\u0941\u0930\u094d\u092d\u093e\u0935\u0928\u093e\u092a\u0942\u0930\u094d\u0923 SQL \u0915\u094b\u0921 \u0921\u093e\u0932\u0928\u093e \u0936\u093e\u092e\u093f\u0932 \u0939\u0948, \u091c\u093f\u0938\u0915\u0947 \u092a\u0930\u093f\u0923\u093e\u092e\u0938\u094d\u0935\u0930\u0942\u092a \u0938\u0902\u092d\u093e\u0935\u093f\u0924 \u0930\u0942\u092a \u0938\u0947 \u0905\u0928\u0927\u093f\u0915\u0943\u0924 \u092a\u0939\u0941\u0902\u091a, \u0921\u0947\u091f\u093e \u092d\u094d\u0930\u0937\u094d\u091f\u093e\u091a\u093e\u0930 \u092f\u093e \u0921\u0947\u091f\u093e \u091a\u094b\u0930\u0940 \u0939\u094b \u0938\u0915\u0924\u0940 \u0939\u0948\u0964<\/p>\n<\/li>\n<li>\n<p><strong>\u0915\u094d\u0930\u0949\u0938-\u0938\u093e\u0907\u091f \u0938\u094d\u0915\u094d\u0930\u093f\u092a\u094d\u091f\u093f\u0902\u0917 (XSS)<\/strong>\u0907\u0938 \u092a\u094d\u0930\u0915\u093e\u0930 \u0915\u0947 \u0939\u092e\u0932\u0947 \u092e\u0947\u0902 \u0935\u093f\u0936\u094d\u0935\u0938\u0928\u0940\u092f \u0935\u0947\u092c\u0938\u093e\u0907\u091f\u094b\u0902 \u092e\u0947\u0902 \u0926\u0941\u0930\u094d\u092d\u093e\u0935\u0928\u093e\u092a\u0942\u0930\u094d\u0923 \u0938\u094d\u0915\u094d\u0930\u093f\u092a\u094d\u091f \u0921\u093e\u0932\u0940 \u091c\u093e\u0924\u0940 \u0939\u0948, \u091c\u093f\u0928\u094d\u0939\u0947\u0902 \u092c\u093e\u0926 \u092e\u0947\u0902 \u092a\u0940\u0921\u093c\u093f\u0924 \u0915\u0947 \u092c\u094d\u0930\u093e\u0909\u091c\u093c\u0930 \u0926\u094d\u0935\u093e\u0930\u093e \u0928\u093f\u0937\u094d\u092a\u093e\u0926\u093f\u0924 \u0915\u093f\u092f\u093e \u091c\u093e\u0924\u093e \u0939\u0948\u0964<\/p>\n<\/li>\n<li>\n<p><strong>\u0915\u092e\u093e\u0902\u0921 \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928<\/strong>\u092f\u0939 \u090f\u0915 \u0906\u0915\u094d\u0930\u092e\u0923 \u0935\u093f\u0927\u093f \u0939\u0948 \u091c\u093f\u0938\u092e\u0947\u0902 \u0939\u092e\u0932\u093e\u0935\u0930 \u092e\u0928\u092e\u093e\u0928\u0947 \u0906\u0926\u0947\u0936 \u0928\u093f\u0937\u094d\u092a\u093e\u0926\u0928 \u0915\u0947 \u0932\u093f\u090f \u0915\u093f\u0938\u0940 \u0905\u0928\u0941\u092a\u094d\u0930\u092f\u094b\u0917 \u092e\u0947\u0902 \u0921\u0947\u091f\u093e \u0907\u0928\u092a\u0941\u091f \u0915\u094b \u092a\u0930\u093f\u0935\u0930\u094d\u0924\u093f\u0924 \u0915\u0930 \u0926\u0947\u0924\u093e \u0939\u0948\u0964<\/p>\n<\/li>\n<\/ol>\n<table>\n<thead>\n<tr>\n<th><\/th>\n<th>\u0938\u0940\u0906\u0930\u090f\u0932\u090f\u092b \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928<\/th>\n<th>\u090f\u0938\u0915\u094d\u092f\u0942\u090f\u0932 \u0907\u0902\u091c\u0947\u0915\u094d\u0937\u0928<\/th>\n<th>\u0915\u094d\u0930\u0949\u0938 \u0938\u093e\u0907\u091f \u0938\u094d\u0915\u094d\u0930\u093f\u092a\u094d\u091f\u093f\u0902\u0917<\/th>\n<th>\u0915\u092e\u093e\u0902\u0921 \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u092e\u0941\u0916\u094d\u092f \u0932\u0915\u094d\u0937\u094d\u092f<\/td>\n<td>HTTP \u0939\u0947\u0921\u0930 \u0914\u0930 \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e \u0907\u0928\u092a\u0941\u091f<\/td>\n<td>\u0921\u0947\u091f\u093e\u092c\u0947\u0938 \u0915\u094d\u0935\u0947\u0930\u0940\u091c\u093c<\/td>\n<td>\u0935\u0947\u092c\u0938\u093e\u0907\u091f \u0915\u0940 \u0915\u094d\u0932\u093e\u0907\u0902\u091f-\u0938\u093e\u0907\u0921 \u0938\u094d\u0915\u094d\u0930\u093f\u092a\u094d\u091f<\/td>\n<td>\u090f\u092a\u094d\u0932\u093f\u0915\u0947\u0936\u0928 \u0915\u093e \u0939\u094b\u0938\u094d\u091f \u0915\u092e\u093e\u0902\u0921 \u0936\u0947\u0932<\/td>\n<\/tr>\n<tr>\n<td>\u0930\u094b\u0915\u0925\u093e\u092e<\/td>\n<td>\u0907\u0928\u092a\u0941\u091f \u0938\u0924\u094d\u092f\u093e\u092a\u0928 \u0914\u0930 \u0938\u094d\u0935\u091a\u094d\u091b\u0924\u093e<\/td>\n<td>\u0924\u0948\u092f\u093e\u0930 \u0915\u0925\u0928\u094b\u0902 \u092f\u093e \u092a\u0948\u0930\u093e\u092e\u0940\u091f\u0930\u093e\u0907\u091c\u093c\u094d\u0921 \u092a\u094d\u0930\u0936\u094d\u0928\u094b\u0902 \u0915\u093e \u0909\u092a\u092f\u094b\u0917<\/td>\n<td>\u0907\u0928\u092a\u0941\u091f \u0938\u0924\u094d\u092f\u093e\u092a\u0928, \u0906\u0909\u091f\u092a\u0941\u091f \u090f\u0928\u0915\u094b\u0921\u093f\u0902\u0917, HTTP-\u0915\u0947\u0935\u0932 \u0915\u0941\u0915\u0940\u091c\u093c<\/td>\n<td>\u0907\u0928\u092a\u0941\u091f \u0938\u0924\u094d\u092f\u093e\u092a\u0928, \u0938\u0941\u0930\u0915\u094d\u0937\u093f\u0924 API \u0915\u093e \u0909\u092a\u092f\u094b\u0917<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u092d\u0935\u093f\u0937\u094d\u092f \u0915\u0947 \u092a\u0930\u093f\u092a\u094d\u0930\u0947\u0915\u094d\u0937\u094d\u092f \u0914\u0930 \u092a\u094d\u0930\u094c\u0926\u094d\u092f\u094b\u0917\u093f\u0915\u093f\u092f\u093e\u0901<\/h2>\n<p>\u092d\u0935\u093f\u0937\u094d\u092f \u092e\u0947\u0902, \u0938\u094d\u0935\u091a\u093e\u0932\u093f\u0924 \u0938\u0941\u0930\u0915\u094d\u0937\u093e \u0909\u092a\u0915\u0930\u0923\u094b\u0902 \u0914\u0930 AI-\u0906\u0927\u093e\u0930\u093f\u0924 \u092d\u0947\u0926\u094d\u092f\u0924\u093e \u092a\u0939\u091a\u093e\u0928 \u092a\u094d\u0930\u0923\u093e\u0932\u093f\u092f\u094b\u0902 \u092a\u0930 \u092c\u0922\u093c\u0924\u0940 \u0928\u093f\u0930\u094d\u092d\u0930\u0924\u093e \u0938\u0947 CRLF \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u0939\u092e\u0932\u094b\u0902 \u0915\u093e \u092a\u0924\u093e \u0932\u0917\u093e\u0928\u0947 \u0914\u0930 \u0930\u094b\u0915\u0925\u093e\u092e \u092e\u0947\u0902 \u0938\u0941\u0927\u093e\u0930 \u0939\u094b\u0928\u093e \u091a\u093e\u0939\u093f\u090f\u0964 \u0907\u0938\u0915\u0947 \u0905\u0924\u093f\u0930\u093f\u0915\u094d\u0924, \u0935\u093f\u0915\u093e\u0938 \u0938\u092e\u0941\u0926\u093e\u092f \u092e\u0947\u0902 \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u0939\u092e\u0932\u094b\u0902 \u092a\u0930 \u0938\u0941\u0930\u0915\u094d\u0937\u093f\u0924 \u0915\u094b\u0921\u093f\u0902\u0917 \u0905\u092d\u094d\u092f\u093e\u0938 \u0914\u0930 \u0936\u093f\u0915\u094d\u0937\u093e \u0905\u0927\u093f\u0915 \u092a\u094d\u0930\u091a\u0932\u093f\u0924 \u0939\u094b\u0928\u0947 \u0915\u0940 \u0909\u092e\u094d\u092e\u0940\u0926 \u0939\u0948, \u091c\u093f\u0938\u0938\u0947 \u0907\u0938 \u091c\u094b\u0916\u093f\u092e \u0915\u094b \u0914\u0930 \u0915\u092e \u0915\u093f\u092f\u093e \u091c\u093e \u0938\u0915\u0947\u0917\u093e\u0964<\/p>\n<h2>\u0938\u0940\u0906\u0930\u090f\u0932\u090f\u092b \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u0914\u0930 \u092a\u094d\u0930\u0949\u0915\u094d\u0938\u0940 \u0938\u0930\u094d\u0935\u0930<\/h2>\n<p>\u092a\u094d\u0930\u0949\u0915\u094d\u0938\u0940 \u0938\u0930\u094d\u0935\u0930, \u091c\u0948\u0938\u0947 \u0915\u093f OneProxy \u0926\u094d\u0935\u093e\u0930\u093e \u092a\u094d\u0930\u0926\u093e\u0928 \u0915\u093f\u090f \u0917\u090f, CRLF \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u0939\u092e\u0932\u094b\u0902 \u0915\u094b \u0930\u094b\u0915\u0928\u0947 \u092e\u0947\u0902 \u092d\u0942\u092e\u093f\u0915\u093e \u0928\u093f\u092d\u093e \u0938\u0915\u0924\u0947 \u0939\u0948\u0902\u0964 \u0938\u0902\u0926\u093f\u0917\u094d\u0927 \u092a\u0948\u091f\u0930\u094d\u0928 \u0915\u0947 \u0932\u093f\u090f \u0906\u0928\u0947 \u0935\u093e\u0932\u0947 \u0914\u0930 \u092c\u093e\u0939\u0930 \u091c\u093e\u0928\u0947 \u0935\u093e\u0932\u0947 \u0921\u0947\u091f\u093e \u0915\u0940 \u091c\u093e\u0902\u091a \u0915\u0930\u0915\u0947, \u090f\u0915 \u092a\u094d\u0930\u0949\u0915\u094d\u0938\u0940 \u0938\u0930\u094d\u0935\u0930 \u0938\u0902\u092d\u093e\u0935\u093f\u0924 \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u092a\u094d\u0930\u092f\u093e\u0938\u094b\u0902 \u0915\u0940 \u092a\u0939\u091a\u093e\u0928 \u0915\u0930 \u0938\u0915\u0924\u093e \u0939\u0948\u0964 \u0909\u0928\u094d\u0928\u0924 \u092a\u094d\u0930\u0949\u0915\u094d\u0938\u0940 \u0938\u0930\u094d\u0935\u0930 \u0932\u0915\u094d\u0937\u094d\u092f \u0938\u0930\u094d\u0935\u0930 \u0915\u094b \u0905\u0917\u094d\u0930\u0947\u0937\u093f\u0924 \u0915\u0930\u0928\u0947 \u0938\u0947 \u092a\u0939\u0932\u0947 \u0921\u0947\u091f\u093e \u0915\u094b \u0938\u093e\u092b \u092d\u0940 \u0915\u0930 \u0938\u0915\u0924\u0947 \u0939\u0948\u0902, \u091c\u093f\u0938\u0938\u0947 \u0938\u0941\u0930\u0915\u094d\u0937\u093e \u0915\u0940 \u090f\u0915 \u0905\u0924\u093f\u0930\u093f\u0915\u094d\u0924 \u092a\u0930\u0924 \u091c\u0941\u0921\u093c \u091c\u093e\u0924\u0940 \u0939\u0948\u0964<\/p>\n<h2>\u0938\u092e\u094d\u092c\u0902\u0927\u093f\u0924 \u0932\u093f\u0902\u0915\u094d\u0938<\/h2>\n<p>\u0938\u0940\u0906\u0930\u090f\u0932\u090f\u092b \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928 \u0915\u0947 \u092c\u093e\u0930\u0947 \u092e\u0947\u0902 \u0905\u0927\u093f\u0915 \u0935\u093f\u0938\u094d\u0924\u0943\u0924 \u091c\u093e\u0928\u0915\u093e\u0930\u0940 \u0915\u0947 \u0932\u093f\u090f, \u0906\u092a \u0928\u093f\u092e\u094d\u0928\u0932\u093f\u0916\u093f\u0924 \u0938\u0902\u0938\u093e\u0927\u0928\u094b\u0902 \u0915\u093e \u0938\u0902\u0926\u0930\u094d\u092d \u0932\u0947 \u0938\u0915\u0924\u0947 \u0939\u0948\u0902:<\/p>\n<ul>\n<li><a href=\"https:\/\/owasp.org\/www-community\/attacks\/CRLF_Injection\" target=\"_new\" rel=\"noopener nofollow\">OWASP CRLF \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928<\/a><\/li>\n<li><a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/Security\/Securing_your_site\/Http_splitting\" target=\"_new\" rel=\"noopener nofollow\">MDN \u0935\u0947\u092c \u0926\u0938\u094d\u0924\u093e\u0935\u0947\u091c\u093c: HTTP \u092a\u094d\u0930\u0924\u093f\u0915\u094d\u0930\u093f\u092f\u093e \u0935\u093f\u092d\u093e\u091c\u0928<\/a><\/li>\n<li><a href=\"https:\/\/www.acunetix.com\/websitesecurity\/crlf-injection\/\" target=\"_new\" rel=\"noopener nofollow\">\u0935\u0947\u092c \u0905\u0928\u0941\u092a\u094d\u0930\u092f\u094b\u0917 \u0938\u0941\u0930\u0915\u094d\u0937\u093e \u0917\u093e\u0907\u0921: CRLF \u0907\u0902\u091c\u0947\u0915\u094d\u0936\u0928<\/a><\/li>\n<li><a href=\"https:\/\/cwe.mitre.org\/data\/definitions\/93.html\" target=\"_new\" rel=\"noopener nofollow\">\u0938\u0940\u0921\u092c\u094d\u0932\u094d\u092f\u0942\u0908 - \u0938\u0940\u0921\u092c\u094d\u0932\u094d\u092f\u0942\u0908-93: \u0938\u0940\u0906\u0930\u090f\u0932\u090f\u092b \u0905\u0928\u0941\u0915\u094d\u0930\u092e\u094b\u0902 \u0915\u093e \u0905\u0928\u0941\u091a\u093f\u0924 \u0928\u093f\u0937\u094d\u092a\u094d\u0930\u092d\u093e\u0935\u0940\u0915\u0930\u0923<\/a><\/li>\n<\/ul>","protected":false},"featured_media":476475,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-476474","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Understanding CRLF Injection<\/mark>","faq_items":[{"question":"What is a CRLF Injection?","answer":"<p>A CRLF Injection is a type of security vulnerability where an attacker infiltrates Carriage Return Line Feed (CRLF) sequences into a web application. This infiltration primarily affects HTTP headers and can lead to various threats such as HTTP Response Splitting and Cross-Site Scripting.<\/p>"},{"question":"When was CRLF Injection first discovered?","answer":"<p>The term 'CRLF Injection' originated from the early days of the internet, as old as the HTTP protocol itself. Its misuse, or \"injection,\" started being recognized as a threat to web application security in the late 1990s and early 2000s.<\/p>"},{"question":"How does a CRLF Injection work?","answer":"<p>A CRLF Injection works by inserting CRLF sequences into an application's expected data stream. By doing this, the attacker can manipulate the system into recognizing these injections as legitimate commands or directives. This can lead to manipulated data flow and potential security vulnerabilities.<\/p>"},{"question":"What are the types of CRLF Injection?","answer":"<p>The two main types of CRLF injections are HTTP Response Splitting, where CRLF sequences are injected into HTTP headers to manipulate the HTTP response, and Log Injection, where the injection is made into log files, potentially forging log entries or inserting malicious content.<\/p>"},{"question":"How can we prevent CRLF Injection attacks?","answer":"<p>CRLF injection attacks can be prevented by implementing input validation and sanitization. This involves limiting the types of characters that can be accepted in user input fields and inspecting HTTP headers for unexpected CRLF sequences.<\/p>"},{"question":"How does CRLF Injection compare with other similar attacks?","answer":"<p>CRLF Injection involves infiltrating CRLF sequences, primarily affecting HTTP headers and user inputs. SQL Injection involves the injection of malicious SQL code, targeting database queries. Cross-Site Scripting involves the injection of malicious scripts into trusted websites, affecting client-side scripts. Command Injection is where an attacker alters dill data inputs to an application to achieve arbitrary command execution, targeting the application's host command shell.<\/p>"},{"question":"How are proxy servers related to CRLF Injection?","answer":"<p>Proxy servers, like OneProxy, can help prevent CRLF Injection attacks. They scrutinize incoming and outgoing data for suspicious patterns, identifying potential injection attempts. Some advanced proxy servers can also sanitize the data before forwarding it to the target server, adding an extra layer of security.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/in\/wp-json\/wp\/v2\/wiki\/476474","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/in\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/in\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/in\/wp-json\/wp\/v2\/wiki\/476474\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/in\/wp-json\/wp\/v2\/media\/476475"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/in\/wp-json\/wp\/v2\/media?parent=476474"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}