> For the complete documentation index, see [llms.txt](https://books.spartan-cybersec.com/web/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://books.spartan-cybersec.com/web/cors.md).

# CORS

- [Lab #2 - CORS vulnerability with trusted null origin](https://books.spartan-cybersec.com/web/cors/lab-2-cors-vulnerability-with-trusted-null-origin.md): https://portswigger.net/web-security/cors/lab-null-origin-whitelisted-attack
- [Lab 3: CORS vulnerability with trusted insecure protocols](https://books.spartan-cybersec.com/web/cors/lab-3-cors-vulnerability-with-trusted-insecure-protocols.md): https://portswigger.net/web-security/cors/lab-breaking-https-attack