EIP-2026-104012

This is a technical writeup describing a cross-site scripting (XSS) vulnerability in Null HTTPd 0.5.1 and prior. The vulnerability allows an attacker to bypass a previous XSS fix by sending a long HTTP request that overwrites memory, enabling the execution of malicious script code in a user's browser.