1.CORS Security: Beyond Basic Configurationblog | 2025-11-21 00:00 | aikido.dev | Original ↗ | .md | #appsec | #browser-security | #web-security
2.Security Risks of Setting Access Control Allow Origin: *research | 2025-03-17 01:38 | projectblack.io | Original ↗ | .md | #web-security | #data-exfiltration | #cors
3.Introducing the URL validation bypass cheat sheetresearch | 2024-09-05 12:36 | portswigger.net | Original ↗ | .md | #burp-suite | #ssrf | #open-redirect
4.Bypassing browser tracking protection for CORS misconfiguration abuseresearch | 2024-01-25 13:37 | swarm.ptsecurity.com | Original ↗ | .md | #browser-security | #web-security | #cors
5.Secure your Apollo GraphQL server with Semgrepblog | 2023-08-29 12:00 | blog.trailofbits.com | Original ↗ | .md | #graphql | #csrf | #static-analysis
6.Exploiting CORS misconfigurations for Bitcoins and bountiesresearch | 2022-08-16 09:24 | portswigger.net | Original ↗ | .md | #bug-bounty | #web-security | #misconfiguration
7.How to Catch Broken Access Control Security Vulnerabilities in Code Review Part 2blog | 2022-01-05 00:00 | hackerone.com | Original ↗ | .md | #access-control | #code-review | #privilege-escalation
8.Bypassing AngularJS bind HTMLresearch | 2020-09-08 12:23 | portswigger.net | Original ↗ | .md | #xss | #portswigger | #cors
9.Is CORS Becoming Obsolete?blog | 2017-09-06 00:00 | bishopfox.com | Original ↗ | .md | #browser-security | #web-security | #w3c