CSS:the bomb inside your inbox

PortSwigger Research feed containing recent web application security research on CSS and email-client attacks, HTTP request smuggling and desynchronization, SAML authentication bypasses, cookie and URL parser discrepancies, cache poisoning, SSRF, XSS, CSP bypasses, JWT/token forgery, timing attacks, and security testing automation. Several entries describe potentially high-impact techniques, including authentication bypass, session-cookie theft, hostile takeover via HTTP/1.1 desync, and exploitation of parser inconsistencies. The document is a research index rather than a report of a single CV