Bah, link staleness. http://www.cgisecurity.com/lib/HTTP-Request-Smuggling.pdf just worked for me. Also, I realise that there may be a disconnect here: squid *shouldn't* break if a client attempts to pipeline through it - if it is, thats a bug to be fixed, squid just will not read the second request until the first one is completed. -Rob