HTTP/3 will not Save you from Request Smuggling: A Methodology to Detect HTTP/3 Header (mis)Validations.

Lorenzo Pisu, Federico Loi, Davide Maiorca, Giorgio Giacinto

Browse the full NCA paper archive.