# HTTP header injection

> web application vulnerability that occurs when HTTP headers are dynamically generated from user input; can allow for HTTP response splitting, session fixation (via Set-Cookie), cross-site scripting, and malicious redirect attacks

**Wikidata**: [Q1592277](https://www.wikidata.org/wiki/Q1592277)  
**Wikipedia**: [English](https://en.wikipedia.org/wiki/HTTP_header_injection)  
**Source**: https://4ort.xyz/entity/http-header-injection