> For the complete documentation index, see [llms.txt](https://ttp.parzival.sh/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ttp.parzival.sh/pentesting/web-applications/cross-origin-resource-sharing-cors.md).

# Cross Origin Resource Sharing (CORS)

> Many modern websites use CORS to allow access from subdomains and trusted third parties. Their implementation of CORS may contain mistakes or be overly lenient to ensure that everything works, and this can result in exploitable vulnerabilities.

### Resources

{% embed url="<https://securityonline.info/of-cors-identifying-and-exploiting-cors-misconfigurations/>" %}

{% embed url="<https://portswigger.net/web-security/cors>" %}