Preliminary research
Solving an ORB mystery
AI-collected research leads through 22 September 2026, including targeted additions between broader sweeps. Unranked, incomplete, not community-vetted, and subject to change.
Chases down why detecting a cross-origin response's status code through a script tag's load and error events works on one site and not another, and arrives at what amounts to a bypass of Opaque Response Blocking usable as an XS-Leak.
Record
- Researcher
- Jorian Woltjer
- Published by
- Critical Thinking - Bug Bounty Podcast
- Date
- Topic
- Other
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Jorian Woltjer, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .