1. Nonce CSP bypass using disk cache, ‘quiet side channel’ for request smuggling, Amazon Q and the malicious pull request – ethical hacker news roundup blog | 2025-08-22 07:07 | yeswehack.com | original ↗ | #csp | #gemini-cli | #roundup
2. Chunked-body parsing flaws, making self-XSS great again, using HTTP redirect loops to achieve non-blind SSRFs – ethical hacker news roundup blog | 2025-07-09 08:14 | yeswehack.com | original ↗ | #cloud | #web-security | #ssrf
Skip to content