CuraSec

tag: Fetch-Api · 1 items

  • Engineer — Learn: Highlights a subtle but real risk: custom auth headers can follow fetch redirects to unintended origins, leaking credentials. Worth reviewing your fetch usage patterns in web apps — no active exploitation, so no immediate action required.
  • SOC/IR — Skip
  • Leader — Skip