# Introducing the URL validation bypass cheat sheet

DevFeed: [Introducing the URL validation bypass cheat sheet](<https://devfeed.tech/articles/introducing-the-url-validation-bypass-cheat-sheet-7687.md>)

Original publisher: [Read original article](<https://portswigger.net/research/introducing-the-url-validation-bypass-cheat-sheet>)

Author: Zakhar Fedotkin

Published: 2024-09-03T14:52:12Z

Content type: article

Language: en

Sources: [PortSwigger Research](<https://devfeed.tech/sources/portswigger-research.md>)

Topics: [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>)

Tags: [cheat-sheet](<https://devfeed.tech/tags/cheat-sheet.md>), [payload](<https://devfeed.tech/tags/payload.md>), [redirection](<https://devfeed.tech/tags/redirection.md>), [security](<https://devfeed.tech/tags/security.md>), [techniques](<https://devfeed.tech/tags/techniques.md>), [testing](<https://devfeed.tech/tags/testing.md>), [tool](<https://devfeed.tech/tags/tool.md>), [validation](<https://devfeed.tech/tags/validation.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [web-applications](<https://devfeed.tech/tags/web-applications.md>)

## AI overview

Introduces an interactive URL Validation Bypass Cheat Sheet that consolidates known payload techniques for testing URL-validation weaknesses.

## Source excerpt

URL validation bypasses are the root cause of numerous vulnerabilities including many instances of SSRF, CORS misconfiguration, and open redirection. These work by using ambiguous URLs to trigger URL