What's in a tag name? JavaScript, apparently

PortSwigger Research feed containing recent web security research on parser discrepancies, HTTP desynchronization and request smuggling, CSS and JavaScript injection, authentication bypasses, cookie and WAF bypasses, SSRF and URL validation bypasses, cache poisoning, timing attacks, CSP bypasses, token forgery, and related offensive security techniques. Several articles describe potentially high-impact exploitation methods, including SAML authentication bypasses, HTTP/1.1 desynchronization, HttpOnly cookie theft, and access-control bypasses. No specific CVE identifiers are provided in the feed