Preliminary research

Invalid Signed HTTP Exchange fallback navigation: SekaiCTF Filtered Reality

dimasma0305 · Project Sekai

AI-collected research leads through 3 November 2026, including a November–October–September missed-article review and a targeted multilingual search alongside earlier community-source sweeps. Unranked, incomplete, not community-vetted, and subject to change.

Solves a constrained reflected-content challenge using an invalid Signed HTTP Exchange body as a fallback navigation source. The navigation changes the Accept header and combines with reflected Content-Type and CSP conditions, illustrating how unsigned fallback behavior can supply a redirect primitive within a larger challenge chain.

Record

Researcher

dimasma0305

Published by

Project Sekai

Format

Code

In the archive

• Collected in the 2026 preliminary research sweep

Related sources

• Challenge solution code

Tags

• http
• content-type
• csp
• open-redirect
• xss
• attack-chain
• owasp-a03-2021
• owasp-a04-2021
• owasp-a05-2021

This page is the archive's own catalogue record. The research is the work of dimasma0305, first published at the original source. Preserved copies are kept so the citation survives its host.