https://justice-reaper.github.io/posts/CORS-Lab-2/
CORS vulnerability with trusted null origin - Justice-Reaper