Hacker News new | past | comments | ask | show | jobs | submit
cowlevel | on: Evolving Threat: http2shell is an RCE in Node, Python, and more
Likely mitigation: disable brotli (br) content-encoding on both sides
thayne | parent
Unfortunately, AFAICT, there is no way to do this for node's fetch. I suspect there are other client libraries that don't have a way to disable it.