I wouldn't say that's recent. The Tangled Web (https://www.amazon.com/Tangled-Web-Securing-Modern-Applications/dp/1593273886) has an entire chapter on how url parsing is broken