HTTP Response Splitting
High · Injection · CWE-113
Description
CRLF in headers splits response into two.
Root cause
Unsanitized CRLF in Location/Set-Cookie headers.
Impact
XSS, cache poisoning, session fixation.
Detection
Header injection tests.
Mitigation
Strip CRLF; use framework header APIs.
Secure coding
Never concatenate user input into headers.
Safe lab example
CRLF injection labs
Practise related skills in Labs or deepen on Academy library.