What's in a tag name? JavaScript, apparently
2026-08-27T20:51:49Z•d701c51c4f64f4d8f004d814e3f22a6360986821d8b9b2c24591d69d9e665ab5
CSP-bypassCSS-injectionHTTP-desyncHttpOnlyIDORJWTPHP-SAMLRuby-SAMLSAMLSSRFURL-validation-bypassWAF-bypassWebSocketXSSapplication-securityauthentication-bypasscookie-securitydata-exfiltrationparser-discrepancyrequest-smugglingsecurity-researchtiming-attacksweb-cache-poisoningweb-security
What happened
PortSwigger Research feed containing recent web security research on HTTP desynchronization, parser discrepancies, authentication bypasses, CSS and JavaScript injection, cookie and WAF bypasses, SSRF and URL validation, cache poisoning, timing attacks, CSP bypasses, and security testing automation. Several publications describe high-impact attack techniques, including SAML authentication bypasses, HTTP stream desynchronization, cookie protection bypasses, and data exfiltration through CSS.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- portswigger_research
- Record identifier
- d701c51c4f64f4d8f004d814e3f22a6360986821d8b9b2c24591d69d9e665ab5
- Enrichment time
- 2026-08-27T20:51:49Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.