Browser-Powered Desync Attacks: A New Frontier in HTTP Request Smuggling
portswigger.net