I think that I have discovered a bug in the Microsoft.AspNet.WebApi.Cors Nuget package and its contained libraries. The bug allows requests from domains that have not been whitelisted as allowed domains as per the CORS policy of the server, to go through and be processed.
In this video, I describe how to reproduce it.
In a following video, I will describe its cause, where the faulty code inside the Microsoft library is, and how to fix the bug.
--------------
The bhajan played at the end of this tutorial is titled "Jaya Bhagawan" and is sung by Krishna Das and his group of bhajan singers and friends.
The video is titled "Jaya Bhagavan - Live With Lyrics" and is available on YouTube at • Jaya Bhagavan - Live With Lyrics
--------------
If you want to learn to program a computer, or you wish to get your software development team trained, please visit https://sathyaish.net/?cmp=yt&v=g_LBk... to hire me to conduct the training.
To hire me for remote software development work, please visit https://sathyaish.net/?cmp=yt&v=g_LBk...