Client-side desync vulnerabilities - a breakthrough in request smuggling techniques