Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 0 down vote favorite

I had asked this question in stackexchange.com ( http://stackoverflow.com/questions/10496410/java-servlet-request-getrequesturl-logged-abnormal-string/10496937#10496937). Since this place is more suited for security related question, I am putting it again here.

In one my servlet running in public domain, I got an abnormal string log from the request.getRequestURL() method. I keep logging the details and found an entry which is "http://answers.yahoo.com". Can some one help me in analyzing how this could have happened and also how to achieve it. Ideally the log should be the URL address in the browser using which a user or a device invokes the servlet.

For example if the registered name of the server mapped to the IP is http://www.alphabeta.com/x_serv?a=2, the logs should be alphabeta.com

share|improve this question
1  
Maybe an header injection? – Cyril N. Jun 18 '12 at 10:01
Thanks cx42net. It will great if you can provide me some details about this type of injection. – Mohit Sethi Jun 18 '12 at 10:13
I recommand you to do a search on google, but here's a link blogs.msdn.com/b/esiu/archive/2007/09/22/… – Cyril N. Jun 18 '12 at 10:21

closed as too localized by Adnan, Xander, TildalWave, D3C4FF, Terry Chia 2 days ago

This question is unlikely to help any future visitors; it is only relevant to a small geographic area, a specific moment in time, or an extraordinarily narrow situation that is not generally applicable to the worldwide audience of the internet. For help making this question more broadly applicable, see the FAQ.

Browse other questions tagged or ask your own question.