Excellent research by Zakhar Fedotkin!

https://portswigger.net/research/bypassing-wafs-with-the-phantom-version-cookie

Comments