control bypass

A bypassed control is worse than no control

CSSQuake is a demonstrable bypass of web application protections through trust manipulation and control boundary erosion. A breakdown of what failed and why.