(Web-)Insecurity Blog | Turning List-Unsubscribe into an SSRF/XSS Gadget

https://security.lauritz-holtmann.de/post/xss-ssrf-list-unsubscribe/

https://x.com/home/status/2003647600826912972

https://x.com/home/status/2003739173556297992

https://x.com/home/status/2003743107477831957