https://justice-reaper.github.io/posts/CORS-Lab-1/
CORS vulnerability with basic origin reflection - Justice-Reaper