These are not HTTP risks, they are URL risks; most of them are mentioned in the `security considerations' section of the (relevant) URL documents.