Hacker News new | past | comments | ask | show | jobs | submit
gsnedders | on: Broccoli2Shell: Brotli decoder RCE in Node.js, Python and more
Header parsing, sure. But message framing bugs are much more likely with HTTP/1.1.