CORS Issue in Exercise 06, Question 11

Question

Hello,

In Exercise 06, Question 11, are we supposed to face a CORS issue when retrieving the response from https://hw06.websec.cs.uni-paderborn.de/a2/ ? If yes, should we use the extension for bypassing CORS restrictions?

Regards,

Answer 1

No. The goal is to simulate a real attack (i.e. without any special preparation of the victim)