Web-security

How an OPTIONS request with x-http-method-override can bypass blocked GET/POST methods, and how defenders can shut it down

How a cookie jar overflow attack allowed me to completely bypass Imperva Incapsula's reese84 token validation