aws / http-desync-guardian / 27792511359

95%

master: 98%

Build Type

Pull #16

github

Committed by Dhruva Gaidhani

Commit Message

feat: Add SuspiciousTeClPresent classification at Severe tier

Refactor suspicious header detection to differentiate between requests
with a single suspicious framing header versus requests where both
suspicious Transfer-Encoding and Content-Length headers are present.

When both a suspicious TE and CL are detected, classify the request as
Severe with reason SuspiciousTeClPresent. Single suspicious headers
remain classified as Ambiguous with reason SuspiciousHeader.

This provides stronger protection against HTTP desync attacks that use
obfuscated framing headers in combination.

Pull Request Pull Request #16: feat: Add SuspiciousTeClPresent classification at Severe tier

Coverage Stats

45 of 45 new or added lines in 1 file covered. (100.0%)

3035 of 3187 relevant lines covered (95.23%)

486432.22 hits per line