cors 3 PortSwigger Walkthrough - CORS vulnerability with trusted null origin Aug 25, 2026 PortSwigger Walkthrough - CORS vulnerability with trusted insecure protocols Aug 25, 2026 PortSwigger Walkthrough - CORS vulnerability with basic origin reflection Aug 25, 2026