(Web-)Insecurity Blog | Turning List-Unsubscribe into an SSRF/XSS Gadget

https://security.lauritz-holtmann.de/post/xss-ssrf-list-unsubscribe/

https://x.com/home/status/2003364147225075876

https://x.com/home/status/2003412292478878010

https://x.com/home/status/2003534714188235165