Web cache poisoning via ambiguous requests-Web Security Academy