Hacker News new | past | comments | ask | show | jobs | submit
gsnedders | on: Broccoli2Shell: Brotli decoder RCE in Node.js, Python and more
There’s both request compression (no negotiation) and response compression (negotiated).