3 ms·
That all makes sense, but the OP said that the scan didn’t identify their HTTP server. I wonder why.
by comex 7y ago
That all makes sense, but the OP said that the scan didn’t identify their HTTP server. I wonder why.
- kbenson 7y agoWell, "Scanning localhost ... localhost complete." which they report means it found the sever, but did not allow access (CORS restricted). This is normal, as the default behavior unless modified by a CORS header is that cross-origin resource sharing is disallowed, and that includes same host but separate port. I believe edit is correct, in that this demonstration is for finding poorly configured local services that have a CORS header that is too open (perhaps because there are multiple services meant to interact with each other).