Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.

I had asked this question in stackexchange.com ( http://stackoverflow.com/questions/10496410/java-servlet-request-getrequesturl-logged-abnormal-string/10496937#10496937). Since this place is more suited for security related question, I am putting it again here.

In one my servlet running in public domain, I got an abnormal string log from the request.getRequestURL() method. I keep logging the details and found an entry which is "http://answers.yahoo.com". Can some one help me in analyzing how this could have happened and also how to achieve it. Ideally the log should be the URL address in the browser using which a user or a device invokes the servlet.

For example if the registered name of the server mapped to the IP is http://www.alphabeta.com/x_serv?a=2, the logs should be alphabeta.com

share|improve this question
1  
Maybe an header injection? – Cyril N. Jun 18 '12 at 10:01
Thanks cx42net. It will great if you can provide me some details about this type of injection. – Mohit Sethi Jun 18 '12 at 10:13
I recommand you to do a search on google, but here's a link blogs.msdn.com/b/esiu/archive/2007/09/22/… – Cyril N. Jun 18 '12 at 10:21

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.