Really interesting labs utilising reflected XSS and WebSocket hijacking. Highly suggest reviewing.
CSRF where Referer validation depends on header being present | Practitioner
SameSite Strict bypass via sibling domain | Practitioner
Cross-site WebSocket hijacking | Practitioner
Really really interesting problem, highly suggests reviewing
SameSite Strict bypass via client-side redirect | Practitioner
Very interesting path traversal problem
SameSite Lax bypass via method override | Practitioner
CSRF where token is duplicated in cookie | Practitioner
CSRF token is tied to a non-session cookie | Practitioner
Very interesting problem. Highly suggest reviewing