HTTP: CORS & Browser Request Boundaries

Diagnose cross-origin reads, preflights, credentials, and server policies.