Web Security

HTTP for Hacking

The HTTP spec from an attacker's lens. Where the ambiguity lives, how parsers disagree, and why that gap is always exploitable.