2018-10-23 UTC
# 
sknebel someone recently shared Orange Tsai's work on URL parsing, here's the continuation on path normalization: https://i.blackhat.com/us-18/Wed-August-8/us-18-Orange-Tsai-Breaking-Parser-Logic-Take-Your-Path-Normalization-Off-And-Pop-0days-Out-2.pdf / https://www.youtube.com/watch?v=28xWcRegncw