Burp Suite User Forum

Login to post

Access-Control-Allow-Origin header doesn't exist

Richard | Last updated: Apr 26, 2021 12:31PM UTC

Hi, I am currently learning about CORS. When I accessed the Lab and saw the response in Burb Suite, I have seen there was no Access-Control-Allow-Origin header. I kept going with the solution provided in Michael Sommer's video, everything was OK, the Lab was solved. I went on with the next Lab, same thing happened. I wonder is there anything wrong with my Burp Suite? Is there any special set up? Please advise your guidance. Thank you. Richard

Uthman, PortSwigger Agent | Last updated: Apr 26, 2021 02:18PM UTC

Hi Richard, Can you send a screenshot to support@portswigger.net containing the information you do see? Please also include the lab title. Can you try disabling any extensions to see if they could be affecting that header? You can also check if you have any Match and Replace rules set up in the Proxy > Options.

You need to Log in to post a reply. Or register here, for free.