CORS vulnerability with basic origin reflection 1 CORS vulnerability with basic origin reflection Apr 5, 2025