What and Where: CORS Misconfigurations
In this video, I showcase CORS Misconfigurations along with the Same-Origin Policy, the defence that browsers put in place to prevent third-party websites from accessing user resources.
Apologies for the frequent cuts in the video, live demos always have a tendency to break on me.
Further Resources:
https://developer.mozilla.org/en-US/d...
https://developer.mozilla.org/en-US/d...
https://portswigger.net/web-security/...