Response queue poisoning via H2.TE request smuggling

This lab is vulnerable to request smuggling due to the front-end server downgrading HTTP/2 requests even when they contain an ambiguous…