When security features collide
portswigger.net | research | #web-security | #xss | #defense | #cloudflare | #portswigger | #waf-bypass | #security-features
Summary
James Kettle argues stacked security features can make systems easier to exploit, demonstrating a Cloudflare email obfuscation quirk that bypasses its WAF and all browser XSS filters.
- Published
- Collected
Skip to content