Timeline for CORS accepting arbitrary origin with GET but not with OPTIONS
Current License: CC BY-SA 4.0
16 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Sep 9, 2021 at 13:39 | comment | added | jub0bs | I've noticed that Cloudflare for Teams exhibits the behaviour described by the OP. | |
| Jan 27, 2021 at 0:02 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Sep 28, 2020 at 23:05 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Aug 29, 2020 at 22:39 | answer | added | CBHacking | timeline score: 1 | |
| Aug 29, 2020 at 7:07 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| May 1, 2020 at 6:02 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Jan 2, 2020 at 6:01 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Sep 4, 2019 at 5:02 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| May 7, 2019 at 4:06 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Jan 7, 2019 at 4:03 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Dec 8, 2018 at 3:54 | answer | added | 1lastBr3ath | timeline score: 1 | |
| Dec 3, 2018 at 13:48 | comment | added | Dolores The Third | I don't see how I can avoid preflight requests here. Could you elaborate? | |
| Dec 3, 2018 at 13:32 | comment | added | paj28 | This is a vulnerability because you can avoid preflighting. There's some info here | |
| Dec 3, 2018 at 12:56 | comment | added | Dolores The Third | No, I've been tasked to perform a penetration test. It's an API used by mobile applications and directly by developers in the backend. | |
| Dec 3, 2018 at 12:53 | comment | added | pfaclix | is that your api or another application ? | |
| Dec 3, 2018 at 12:45 | history | asked | Dolores The Third | CC BY-SA 4.0 |