HTTP/3 will not Save you from Request Smuggling: A Methodology to Detect HTTP/3 Header (mis)Validations. - Lorenzo Pisu; Federico Loi; Davide Maiorca; Giorgio Giacinto (NCA, 2024)