header-injection

How does header injection work?

I have read the section on header injections as described here: http://guides.rubyonrails.org/security.html. But I can't seem to walk through a step by step example of this in my head. Could someone walk me through an example of how exploiting the referer header could cause issues in an application? ...

php mail header injection prevention

Hi, On the php manual page for mail function, there was a user comment saying "take care to prevent header injection". In my application, I use the mail function, and the only user input I use as a parameter to the function is the email address. I do a preliminary check of the email address using the regex ^[_a-z0-9-]+(\.[_a-z0-9-]+)*...