The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Lab: CORS vulnerability with trusted insecure protocols

Ramtin | Last updated: Apr 26, 2022 06:13PM UTC

https://portswigger.net/web-security/cors/lab-breaking-https-attack How is it possible to know that we should URL encode one "<" and "+"? It is impossible to solve the lab without looking at the solution.

Hannah, PortSwigger Agent | Last updated: Apr 28, 2022 09:53AM UTC