{"slug":"aiskills402-cors-config-review-d59021e1","name":"AISkills402: CORS Config Review","summary":"CORS Config Review — Reviews CORS code or server configuration (an Express or Flask handler, an nginx block, a framework setting) for the five mistakes that let a hostile web page read private responses, and lists only those, one line each with a fixed code, the place, why it is dangerous and the fix - or exactly No findings. It catches a request Origin copied into the allow header while cookies are allowed, a wildcard origin together with credentials, the null origin allowed, an origin check b…","status":"live","indexable":true,"listed_since":"2026-10-25T17:52:13.721731Z","sources":[{"source":"x402_bazaar","external_id":"https://api.aiskills402.com/v1/skills/cors-config-review/file","owner_address":"0x8e37022edcf0f21cf3c9f93fee9d4d32519f36f4","seen_at":"2026-10-26T14:40:37.073441Z","removed_at":null}],"endpoints":[{"url":"https://api.aiskills402.com/v1/skills/cors-config-review/file","host":"api.aiskills402.com","protocol":"x402","state":"live","last_probe_at":"2026-10-26T07:12:42.391069Z","last_ok_at":"2026-10-26T07:12:42.391069Z","tools_count":null,"tools_changed_at":null,"uptime_24h":1.0,"uptime_30d":1.0}],"also_listed_as":[{"slug":"api-aiskills402-com-62d86cc3","name":"api.aiskills402.com"}],"payment_options":[{"endpoint_url":"https://api.aiskills402.com/v1/skills/cors-config-review/file","network":"eip155:8453","scheme":"exact","rail":"exact","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","coin":"USDC","asset_label":"USD Coin","amount":"10000","pay_to":"0x8e37022edcf0f21cf3c9f93fee9d4d32519f36f4","observed_at":"2026-10-26T07:12:42.391069Z"}],"usage":{"source":"x402_bazaar","unique_payers_30d":2,"paid_calls_30d":2,"last_paid_at":"2026-10-19T07:41:03.514Z","reported_at":"2026-10-26T14:40:37.073441Z"},"assessment":null,"identity":{"endpoint_domains":[],"proven_domains":[],"proven_wallets":[],"namesakes":[],"namesake_count":0},"replies":[],"customers":null,"scan":null,"notice":"Not affiliated with addrbook — claim or request removal."}