ESI Injection Part 2: Abusing specific implementations

by | May 2, 2019

Last year, we published a blog post about the injection of ESI tags in pages to fool the web cache proxy, and in August 2018, our colleague Louis Dion-Marcil spoke at Defcon about the discovery of the ESI Injection uncovered by the GoSecure intrusion testing team. For...

Pin It on Pinterest