CODEWITHSUNDEEP
httphttp-headers
Iasen Kostov
Iasen Kostov

Reputation: 49

Does http header include zero at the end?

Let's say this is the http header: 

Content-length: 67728\r\n
Content-type: application/x-genericbytedata-octet-stream\r\n
\r\n

Does it include \0 at the end of the header or the "Content-length" bytes start directly after the last \n ?

Upvotes: 2

Views: 1774

Answers (2)

regilero
regilero

Reputation: 30536

In complement.

The Body will start after the end of the headers. And of the headers is "\r\n\r\n", "\n\r\n", "\r\n\n" or "\n\n" (that is two valid end-of-line sequences).

Adding an "\0" somewhere in your headers will almost certainly makes the server reject your request (silently or not). Trying to inject NULL character in a request is usually considered as an attack attempt.

In HTTP line separator syntax is "\r\n", and usually this is what the parsers are seeking, not the NULL character. With one optional exception, in headers, where a line starting with a space may be considered as part of the previous header (this is the obs-fold syntax), so "X:B\r\n Z\r\n" is in fact the header "X" with value "B Z".

Upvotes: 1

Julian Reschke
Julian Reschke

Reputation: 42065

There is no null byte at the end, so no, it's not included.

Upvotes: 2

Related Questions