Authority Parsing Ambiguity in HTTP Message Construction
How malformed host values cross URI, header, and proxy trust boundaries
Featured
A research note examining how permissive host parsing can propagate malformed authority values into HTTP messages and forwarded-header rewriting flows.
CategoryHTTP Parser Differential Security
EcosystemPHP / PSR-7
DifficultyResearch
FikreSekhel Research18 min readJun 01, 2026
Research Notes
Length Validation as a Memory Safety Boundary
How unchecked size assumptions transform compatibility helpers into memory corruption surfaces
Featured
A research note examining length validation failures as foundational memory safety boundary violations.
CategoryNative Memory Safety
EcosystemC / Node.js Native Bindings
DifficultyResearch
FikreSekhel Research16 min readJun 01, 2026
Research Notes
Canonicality as a Security Boundary in Cryptographic Parsing
Why non-canonical encodings can introduce ambiguity across cryptographic parser ecosystems
Featured
A research note examining how encoding canonicality affects trust guarantees in security-critical parsing workflows.
CategoryCryptographic Parsing Security
EcosystemJavaScript / ASN.1
DifficultyResearch
FikreSekhel Research17 min readJun 01, 2026
Research Notes
Incomplete Cleanup as an Availability Attack Primitive
How interrupted resource lifecycle handling becomes a denial-of-service vector
Featured
A research note examining how incomplete cleanup of transient resources enables availability degradation in streaming systems.