Preliminary research
Solving an ORB mystery
AI-collected research leads through 6 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.
Chases down why detecting a cross-origin response's status code through a script tag's load and error events works on one site and not another, and arrives at what amounts to a bypass of Opaque Response Blocking usable as an XS-Leak.
Record
- Researcher
- Jorian Woltjer
- Published by
- Critical Thinking - Bug Bounty Podcast
- Date
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Jorian Woltjer, first published at the original source. Preserved copies are kept so the citation survives its host.