New Class of HTTP Request Smuggling Attacks Showcased at Black Hat USA

This new technique causes a desync between the front-end and the browser, allowing an attacker to “craft high-severity exploits without relying on malformed requests that browsers will never send”, James Kettle noted.