Skip to content
Bypassing browser tracking protection for CORS misconfiguration abuse
swarm.ptsecurity.com | research | #browser-security | #web-security | #cors | #same-origin-policy | #tracking-protection
Summary
PT SWARM shows CORS misconfigurations — reflected Origin plus credentials — can still leak sensitive data despite tracking protection, by bypassing the block on third-party requests.
- Published
- Collected