BSCP

Practice session

A CORS misconfiguration reflects any origin in the `Access-Control-Allow-Origin` header and includes `Access-Control-Allow-Credentials: true`. What does this allow an attacker to do?

Loading your practice session…