In web applications an HTTP refers to Hypertext Transfer Protocol and an HTTP Header is the value that is displayed in a request or response message, the header has a name and a value separated by a colon.
An HTTP header attack called an header injection is a vulnerability that is present when users' inputs are required for the dynamic generation of HTTP headers. This vulneraility allows several security threats to be carried out, some examples are:
