1.Nonce CSP bypass using disk cache, ‘quiet side channel’ for request smuggling, Amazon Q and the malicious pull request – ethical hacker news roundupblog | 2025-08-22 07:07 | yeswehack.com | Original ↗ | .md | #csp | #gemini-cli | #roundup
2.Chunked-body parsing flaws, making self-XSS great again, using HTTP redirect loops to achieve non-blind SSRFs – ethical hacker news roundupblog | 2025-07-09 08:14 | yeswehack.com | Original ↗ | .md | #cloud | #web-security | #ssrf