Beware the false false-positive: how to distinguish HTTP pipelining from request smuggling https://www.reddit.com/r/netsec/comments/1mukfs9/beware_the_false_falsepositive_how_to_distinguish/