cors

burp plugin - CORS* https://github.com/portswigger/additional-cors-checks

simple cors test script

<!DOCTYPE html>
<html>
<head>
    <meta charset="utf-8"/>
    <title>simple-cors-test</title>
    <script src="https://code.jquery.com/jquery-3.6.1.min.js"
            integrity="sha256-o88AwQnZB+VDvE9tvIXrMQaPlFFSUTR+nldQm1LuPXQ="
            crossorigin="anonymous"></script>
</head>
<script type="text/javascript">
    (function main() {
        console.log("simple-cors-test");
        $.ajax({
            url: "https://api.github.com",
            success: function (data) {
                console.log(data);
            }
        });
    })();
</script>
</html>