Exploiting a Starlette FileResponse race condition to bypass content-length checks and leak environment variables.
Breaking a Chrome password manager using origin tricks and CSS side-channels to steal the flag byte-by-byte.
