The Web Application Hacker’s Handbook Discovering and Exploiting Security Flaws

Transfer-Encoding

— This is used to specify any encoding that was

performed on the message body to facilitate its transfer over HTTP. It is

normally used to specify chunked encoding when this is employed. 

Request Headers

■■

Accept — 

This is used to tell the server what kinds of content the client

is willing to accept, such as image types, office document formats, and

so on.

■■

Accept-Encoding

— This is used to tell the server what kinds of content

encoding the client is willing to accept.

■■

Authorization — 

This is used to submit credentials to the server for one

of the built-in HTTP authentication types.

■■

Cookie — 

This is used to submit cookies to the server which were pre-

viously issued by it.

Chapter 3 

■