CORS Misconfiguration PoC

If you're logged into the target app, your private data will be stolen.