https://shuciran.github.io/posts/CORS/
Same-Origin Policy and CORS - Shuciran Pentesting Notes