Preliminary research
Solving an ORB mystery
AI-collected research leads through 3 November 2026, including a November–October–September missed-article review and a targeted multilingual search alongside earlier community-source sweeps. Unranked, incomplete, not community-vetted, and subject to change.
Chases down why detecting a cross-origin response's status code through a script tag's load and error events works on one site and not another, and arrives at what amounts to a bypass of Opaque Response Blocking usable as an XS-Leak.
Record
- Researcher
- Jorian Woltjer
- Published by
- Critical Thinking - Bug Bounty Podcast
- Date
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Jorian Woltjer, first published at the original source. Preserved copies are kept so the citation survives its host.