Chunked-body parsing flaws, making self-XSS great again, using HTTP redirect loops to achieve non-blind SSRFs – ethical hacker news roundup

Published

2025-07-09 08:14

Collected

2026-07-21 11:19

---
id: 4746
title: "Chunked-body parsing flaws, making self-XSS great again, using HTTP redirect loops to achieve non-blind SSRFs – ethical hacker news roundup"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/news/chunked-parsing-self-xss-http"
published_at: "2025-07-09 08:14"
tags: ["cloud", "web-security", "ssrf", "roundup", "http-smuggling", "self-xss", "redirect-loop"]
phying_url: "https://phying.com/item/4746"
lang: en
---

# Chunked-body parsing flaws, making self-XSS great again, using HTTP redirect loops to achieve non-blind SSRFs – ethical hacker news roundup

## Summary

Roundup: abusing ambiguous chunk line terminators for HTTP smuggling, 'Make Self-XSS Great Again' via credential-less frames, and using HTTP redirect loops to turn SSRF into full-response reads.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2025-07-09 08:14
- **Original:** https://www.yeswehack.com/news/chunked-parsing-self-xss-http
- **Phying News:** https://phying.com/item/4746