sc-cors

What problem does it solve?

CORS misconfigurations can expose sensitive APIs to unintended origins, enabling data leakage and misuse. This skill identifies risky patterns that allow unauthorized cross-origin access, such as wildcard origins with credentials or unsafe origin reflection.

Core Features & Use Cases

• Detect wildcard origins used with credentials and other unsafe patterns.
• Detect reflected origin handling that echoes request origins without proper validation.
• Detect null-origin allowances and weak regex-based allowlists that enable bypasses.
• Provide actionable remediation guidance to tighten CORS policies in web APIs.

Quick Start

Use the CORS scan against your API to identify misconfigurations and insecure origins.