TRB-039v1.0.0 · http_conflicting_content_length_detected
HTTP conflicting content length detected
HTTP conflicting content length detected identifies hTTP components can disagree about message framing or header interpretation.
CWE mapping
CWE-444parser differential
Assurance
The analyzer verified the reported property directly from the supplied input.
Conditional: Operational impact can still depend on where and how this value is used.
Inert example
Displayed as text only. tryb does not execute this example.
POST / HTTP/1.1\r\nContent-Length: 4\r\nContent-Length: 9\r\n\r\ntestRemediation
constrain-parser. Disable ambiguous or dangerous parser modes instead of guessing intent from text.
Verify: Confirm the production parser rejects the construct under its deployed configuration.
What to verify next
Compare the finding with the destination system's validation and trust policy.