Cybersecurity
Auditing CORS Policy
Audit a target's CORS posture — Access-Control-Allow-Origin handling, reflected-origin bypass, credentials+wildcard mismatch, preflight OPTIONS behavior, Vary header correctness. Use when: a third-party integration is failing CORS preflight and someone proposes "just set Allow-Origin to *" as the fix, OR your bug-bounty inbox has a credential-reuse exploit chain. Threshold: any reflection of arbitrary Origin into Allow-Origin, Allow-Credentials:true with wildcard origin (browser-rejected combo but server config wrong), missing Vary:Origin on per-origin responses, preflight cached over 86400s, OR Allow-Origin trust of attacker- controlled subdomain pattern. Trigger with: "audit cors", "check cors policy", "cors bypass", "preflight check".
- Publisher / source
- jeremylongshore/tons-of-skills-marketplace (found on GitHub top repositories)
- Upstream record
- jeremylongshore/tons-of-skills-marketplace
- Version
- Version 1
- Published
- Publication review
- Approved for publication
- Content fingerprint
72e3c818333630b357a25f859a1afae8b619b19c58501e2af6a5f8aa56eb9ff7