CSS:the bomb inside your inbox

PortSwigger Research feed containing recent web security research on CSS injection and data exfiltration, CRLF-based HTTP desynchronization, SAML authentication bypasses, cookie and parser discrepancies, request smuggling, cache poisoning, URL validation bypasses, CSP bypass, token forgery, XSS, and related offensive testing techniques. Several entries describe potentially critical authentication bypass, session theft, request desynchronization, and sensitive-data exfiltration impacts, but the document is a research index rather than a report of one confirmed vulnerability. No CVE identifiers,