Scalable Vector Grief

PortSwigger Research feed covering web application security research, including SVG and CSS sanitizer bypasses, browser and parser discrepancies, HTTP request smuggling and desynchronization, SAML authentication bypasses, cookie security bypasses, CSS and XSS data exfiltration, URL validation flaws, web cache attacks, timing attacks, and AI-assisted security testing. Several articles describe potentially high-impact techniques such as authentication bypass, cookie theft, hostile takeover, and JavaScript execution. No specific CVE identifiers are provided in the supplied feed metadata.