Solving PortSwigger Labs: CORS vulnerability with trusted null origin

Jul 23, 2025 · 5 min read · Introduction Cross-Origin Resource Sharing (CORS) vulnerabilities can take many forms, and one of the most interesting variants involves trusting the "null" origin. In this article, we'll explore the PortSwigger Web Security Academy lab "CORS vulnera...