What's in a tag name? JavaScript, apparently
2026-08-25T20:51:48Z•f9932fe170756718725e7df2b922e695c856b2b65e01d1485f7d39440a67fc7a
CSP-bypassCSS-injectionHTTP-desyncJWTSAMLSSRFURL-validationWAF-bypassXSSaccess-controlauthentication-bypasscookie-securityparser-discrepancyrequest-smugglingsecurity-researchweb-application-securityweb-cache-poisoningweb-security
What happened
PortSwigger Research feed containing web security research on parser discrepancies, HTTP request smuggling and desynchronization, CSS and JavaScript injection, authentication bypasses, cookie and WAF bypasses, SSRF and URL validation, cache poisoning, SAML vulnerabilities, XSS, CSP bypasses, and security testing tooling. Several entries describe high-impact attack techniques, including authentication bypass and potential session compromise, but the feed is a collection of research rather than a single confirmed vulnerability.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- portswigger_research
- Record identifier
- f9932fe170756718725e7df2b922e695c856b2b65e01d1485f7d39440a67fc7a
- Enrichment time
- 2026-08-25T20:51:48Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.