# gunicorn

## v20.0.4 Request Smuggling

Use header, `X-Forwarded-For: localhost`

* <https://grenfeldt.dev/2021/04/01/gunicorn-20.0.4-request-smuggling>
* <https://blog.deteact.com/gunicorn-http-request-smuggling/>