CORS Policy Analyzer
Examines CORS-related headers on HTTP responses, such as:
Access-Control-Allow-OriginAccess-Control-Allow-CredentialsAccess-Control-Allow-MethodsAccess-Control-Allow-HeadersAccess-Control-Expose-Headers
Flags potentially risky patterns, such as wildcard origins combined with credentials.
For request format, parameters, and examples, see the Endpoint page in this module.
Last updated on