And I posted a full whitepaper/presentation on the technique here: https://portswigger.net/research/http-desync-attacks-request...