Spotify CORS Vulnerability

Access-Control-Allow-Origin: * + Access-Control-Allow-Credentials: true


Attempting to steal Spotify user data...

If you are logged into Spotify in this browser, your data will appear below.


API Endpoints: