---
id: 5104
title: "Bypassing browser tracking protection for CORS misconfiguration abuse"
source_domain: swarm.ptsecurity.com
source_url: "https://swarm.ptsecurity.com/bypassing-browser-tracking-protection-for-cors-misconfiguration-abuse/"
published_at: "2024-01-25T13:37:47Z"
tags: ["browser-security", "web-security", "cors", "same-origin-policy", "tracking-protection"]
phying_url: "https://phying.com/item/5104"
lang: en
---

# Bypassing browser tracking protection for CORS misconfiguration abuse

## Summary

PT SWARM shows CORS misconfigurations — reflected Origin plus credentials — can still leak sensitive data despite tracking protection, by bypassing the block on third-party requests.

## Intelligence Metadata

- **Sources:** swarm.ptsecurity.com
- **Published:** 2024-01-25T13:37:47Z
- **Original:** https://swarm.ptsecurity.com/bypassing-browser-tracking-protection-for-cors-misconfiguration-abuse/
- **Phying News:** https://phying.com/item/5104