Web

Cross-Origin Web Attacks via HTTP/2 Server Push and Signed HTTP Exchange

This paper investigates the security implications of HTTP/2 server push and signed HTTP exchange (SXG) on the Same-Origin Policy (SOP), a fundamental web security mechanism designed to prevent cross-origin attacks.