Making HTTP header injection critical with one prompt

PortSwigger Research feed covering recent web security research and tooling, including CRLF-powered HTTP desynchronization and header injection, SVG/CSS sanitization bypasses, SAML authentication bypasses, cookie prefix and HttpOnly bypasses, URL validation and SSRF bypasses, web cache exploitation, parser discrepancies, timing attacks, XSS, WebSocket testing, and AI-assisted security testing. The most severe topics describe potential authentication bypass, session theft, request smuggling/desynchronization, arbitrary JavaScript execution, data exfiltration, and attacks against other users.