Before HTTP2Shell: Brotli's Stale Table Read
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
A security write-up traces the origins of the HTTP2Shell vulnerability to a February 2018 Brotli commit that added a guard against reading uninitialized or stale switching tables.