Hacker News new | past | comments | ask | show | jobs | submit
cowlevel | on: Broccoli2Shell: Brotli decoder RCE in Node.js, Python and more
Just send a POST with Content-Encoding:br to any URL and hope it gets decided before the URL route is checked.