Verified Reference vs Application-Consumed Data Confusion
When cryptographic verification succeeds but application logic consumes unsigned XML nodes
Featured
A research note examining the security gap between XML Signature reference validation and application-level data extraction.
CategoryCryptographic Trust Boundaries
EcosystemXML Security
DifficultyResearch
FikreSekhel Research20 min readJun 01, 2026
Research Notes
Authority Parsing Ambiguity in HTTP Message Construction
How malformed host values cross URI, header, and proxy trust boundaries
Featured
A research note examining how permissive host parsing can propagate malformed authority values into HTTP messages and forwarded-header rewriting flows.
CategoryHTTP Parser Differential Security
EcosystemPHP / PSR-7
DifficultyResearch
FikreSekhel Research18 min readJun 01, 2026
Research Notes
Length Validation as a Memory Safety Boundary
How unchecked size assumptions transform compatibility helpers into memory corruption surfaces
Featured
A research note examining length validation failures as foundational memory safety boundary violations.
CategoryNative Memory Safety
EcosystemC / Node.js Native Bindings
DifficultyResearch
FikreSekhel Research16 min readJun 01, 2026
Research Notes
Canonicality as a Security Boundary in Cryptographic Parsing
Why non-canonical encodings can introduce ambiguity across cryptographic parser ecosystems
Featured
A research note examining how encoding canonicality affects trust guarantees in security-critical parsing workflows.