James Kettle: Browser-Powered Desync — A New Era of HTTP Request Smuggling

A DEF CON 30 talk about a new class of HTTP Request Smuggling attacks where...