I Broke CORS Three Times on Purpose (PortSwigger Academy Writeup)

If you've ever stared at an Access-Control-Allow-Origin header and thought "yeah that looks fine," congratulations, you're exactly the kind of developer these labs are designed to humble. I just finis