search

nytimes / gziphandler

Go middleware to gzip HTTP responses
https://godoc.org/github.com/NYTimes/gziphandler
Apache License 2.0
868 stars 129 forks source link

Add Heal The Breach support #115

Open henrisson opened 1 year ago

henrisson commented 1 year ago

gzip may allow attacks known as BREACH or CRIME (see https://en.wikipedia.org/wiki/BREACH).

This implements "Heal The Breach" ("HTB") as documented in https://ieeexplore.ieee.org/document/9754554