HIGHCWE-436
PARSE-007 Content-Type Mismatch Exploitation
Parser Differential: Exploits differences in how parsers (JSON, YAML, markdown) interpret the same input to bypass security controls
Description
Sends payload with mismatched Content-Type header so different middleware layers parse the body with different parsers
Remediation
Enforce Content-Type validation at every parsing layer. Reject requests where declared type does not match actual content format. Use a single canonical parser per endpoint.