Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Header lines with improper terminators manipulated by Burp in strange ways

David | Last updated: Oct 29, 2017 12:54AM UTC

I'm currently testing an embedded device with a cgi-script that terminates header lines with only '\n', and '\n\n' at the end of all headers. While not RFC-compliant, browsers seem to handle this just fine. However, when it goes through Burp, the '\n\n' is replaced with '\n\r\n\r\n', which the browser interprets as *3* newlines, causing an extra newline to appear in the browser, breaking the parsing of the responses to XHRs. Tested on 1.7.27 free, can test on pro at work next week.

PortSwigger Agent | Last updated: Oct 30, 2017 10:59AM UTC