New Stuff (PRSSI), FP Stuff (Path Traversal, Cache-Control)

PRSSI - really long acronym and really long process to exploit, but it works

 http://blog.portswigger.net/2015/02/prssi.html

What the people say

http://www.reddit.com/r/netsec/comments/2w7ei1/detecting_and_exploiting_pathrelative_stylesheet

Oh yeah, I forget how that works.

https://www.owasp.org/index.php/Path_Traversal

Confusion about cache-control. So simple really.

http://securityevaluators.com/knowledge/case_studies/caching/

www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.9.1

http://stackoverflow.com/questions/12908766/what-is-cache-control-private

And behind the scences.

http://www.w3.org/Protocols/HTTP/Issues/cache-private.html