The Web Application Hacker’s Handbook Discovering and Exploiting Security Flaws

N OT E

The correct technical term for a URL is actually 

URI

(or uniform

resource identifier), but this term is really only used in formal specifications

and by those who wish to exhibit their pedantry.

40

Chapter 3 

■

Web Application Technologies

70779c03.qxd:WileyRed  9/14/07  3:12 PM  Page 40

---

HTTP Headers

HTTP supports a large number of different headers, some of which are

designed for specific unusual purposes. Some headers can be used for both

requests and responses, while others are specific to one of these message types.

The headers you are likely to encounter when attacking web applications are

listed here.