open-cors-anti-pattern
CommunitySecure CORS policies
Authorigbuend
Version1.0.0
Installs0
System Documentation
What problem does it solve?
This Skill addresses the security risk of overly permissive Cross-Origin Resource Sharing (CORS) policies, which can expose sensitive data and allow unauthorized actions by malicious websites.
Core Features & Use Cases
- Detects insecure CORS configurations: Identifies wildcard (
*) or reflectedOriginheaders. - Provides secure alternatives: Offers examples of strict allowlists for trusted origins.
- Use Case: Reviewing an API's response headers to ensure that
Access-Control-Allow-Originis not set to*or reflecting an untrusted client origin, thereby preventing potential data breaches.
Quick Start
Review the CORS configuration for the current project to ensure it follows security best practices.
Dependency Matrix
Required Modules
None requiredComponents
references
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: open-cors-anti-pattern Download link: https://github.com/igbuend/grimbard/archive/main.zip#open-cors-anti-pattern Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.