dsad

vuln-lab/web/www/api/me.php

@@ -0,0 +1,7 @@
+<?php
+header("Content-Type: application/json");
+if (!empty($_SERVER['HTTP_ORIGIN'])) {
+    header("Access-Control-Allow-Origin: " . $_SERVER['HTTP_ORIGIN']);
+    header("Access-Control-Allow-Credentials: true");
+}
+echo json_encode(['username' => 'guest', 'role' => 'anonymous']);