'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>
 
   
 

http_proto:illegal_content-type（Rule ID：1000000059）

Release Date：2025/9/15

Rule Name：The Content-Type header is illegal in the HTTP Request

Severity：mid

CVE ID：

 

Descripiton：

Attakers may hack the Web server making use of HTTP. According to the RFC definition, the valid format of Content-Type is 'type "/" subtype *( OWS ";" OWS parameter )'.This rule supports to defend the A1: Broken Access Control of OWASP Top 10 - 2021.
Other reference：None

 

Solution：

Update vendor patches.