Subdomain Takeover

• Scraping the bottom of the CORS barrel (part 1) Aug 4

• Subdomain takeover: ignore this vulnerability at your peril Feb 12
• The great SameSite confusion Jan 29