One Character in an HTTP Header Just Bypassed Authentication on 325M Servers · HackerTrans