Making HTTP header injection critical with one prompt

You can now escalate HTTP header injection to a CRLF-Powered Desync and exploit it to serve random users a redirect to your collaborator, in a single prompt. We’ve just introduced a new scan check for

Summary from PortSwigger Research.

Explained

The technology and terms in this story. Learn more