Protocol-Security

Cross-Origin Web Attacks via HTTP/2 Server Push and Signed HTTP Exchange
Inbox Invasion: Exploiting MIME Ambiguities to Evade Email Attachment Detectors