== See

* https://owasp.org/Top10/A05_2021-Security_Misconfiguration/[OWASP Top 10 2021 Category A5] - Security Misconfiguration
* https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures/[OWASP Top 10 2021 Category A7] - Identification and Authentication Failures
* https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS[developer.mozilla.org] - CORS
* https://developer.mozilla.org/en-US/docs/Web/Security/Same-origin_policy[developer.mozilla.org] - Same origin policy
* https://owasp.org/www-project-top-ten/2017/A6_2017-Security_Misconfiguration[OWASP Top 10 2017 Category A6] - Security Misconfiguration
* https://cheatsheetseries.owasp.org/cheatsheets/HTML5_Security_Cheat_Sheet.html#cross-origin-resource-sharing[OWASP HTML5 Security Cheat Sheet] - Cross Origin Resource Sharing
* https://cwe.mitre.org/data/definitions/346[MITRE, CWE-346] - Origin Validation Error
* https://cwe.mitre.org/data/definitions/942[MITRE, CWE-942] - Overly Permissive Cross-domain Whitelist
* https://www.sans.org/top25-software-errors/#cat3[SANS Top 25] - Porous Defenses
