CORS PoC - Revvity Signals Research

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_164":165,"_166":167},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_123":-5,"_20":124,"_22":125,"_126":127,"_128":129,"_26":130,"_24":131,"_132":-5,"_133":-5,"_134":61,"_135":136,"_137":61,"_138":-5,"_139":-5,"_140":141},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","hodkasia","name","hakhjksdkdskjjds","branchName","main","version","path","main.html","project",{"_33":68,"_13":14,"_44":69,"_70":-5,"_71":61,"_72":73,"_74":73,"_75":76,"_77":-5,"_78":79,"_80":-5,"_81":61,"_82":-5,"_83":-5,"_84":85,"_86":87,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":93,"_94":93,"_95":96,"_97":96,"_98":96,"_99":93,"_100":93,"_101":102,"_103":104,"_105":106,"_107":61},"tree",[50,51],"file",{"_33":34,"_35":36,"_37":38,"_13":19,"_39":40,"_41":24,"_17":42,"_43":-5,"_44":45,"_46":47,"_48":-5,"_18":49},"contents",[],"upstream","pull","ahead","behind","envVars","id","3bd97fed-81f9-4b98-8500-5d9b77eb8fc9","branchId","43141556-edcb-4b50-8fe0-93be7156a649","fileId","dc70d150-8c93-11f1-bfd6-1607ee4eb77e","content","\n\n \n \n CORS PoC - Revvity Signals Research\n \n \n \n

[!] CORS PoC — secopsh1.signalsresearch-qa.revvitycloud.net

\n\n

\n Open this file directly from disk (file://) or from any web server.
\n Be logged in to Signals Research in the same browser, then click the\n button.
\n This page never reads the session cookie — CORE_SESSION is HttpOnly. The\n browser
\n attaches it automatically because it is SameSite=None, and the server\n reflects
\n whatever Origin this page has (including \"null\" for file://).\n

\n\n \n show alert() popups\n\n

idle

\n\n \n \n","fileType",3,"parentId","createdAt",["D",1785470289581],"branchVersion",8,"label",[19],{"_33":34,"_13":19,"_37":38,"_43":-5,"_35":36,"_46":47,"_56":57,"_44":65,"_17":42,"_41":24,"_39":40,"_60":61,"_48":-5,"_62":66,"_18":67},{"_33":52,"_13":53,"_37":54,"_43":-5,"_35":36,"_46":55,"_56":57,"_44":58,"_17":42,"_41":24,"_39":59,"_60":61,"_48":-5,"_62":63,"_18":64},"6815f557-13ea-49e2-ad5d-c35b7894880d","new-file-5240.html","e087cf96-8c93-11f1-b32a-1607ee4eb77e",7,"latest",true,["D",1785470263254],"\n\n\n\nCORS PoC - Revvity Signals Research\n\n\n\n\n

[!] CORS PoC — secopsh1.signalsresearch-qa.revvitycloud.net

\n\n

\n Open this file directly from disk (file://) or from any web server.
\n Be logged in to Signals Research in the same browser, then click the button.
\n This page never reads the session cookie — CORE_SESSION is HttpOnly. The browser
\n attaches it automatically because it is SameSite=None, and the server reflects
\n whatever Origin this page has (including \"null\" for file://).\n

\n\n\n show alert() popups\n\n

idle

\n\n\n\n\n","deleted",false,"children",[],[53],["D",1785470289581],[],[19],"c6daac75-d2b7-44be-9470-cc3f3f1db4dc",["D",1785470211144],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Test","imageUrl","userId","fb0331e0-3d1a-11f0-9155-83afa7ef9de7","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","e865a235-9d7e-4e40-8d1d-575770dfd6e0","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_122":118},"org",{"_11":12,"_116":-5,"_117":118,"_78":79,"_119":120,"_121":61},"branch",{"_17":47,"_13":16,"_33":36,"_108":68,"_109":-5,"_110":-5,"_111":-5,"_112":-5,"_113":-5,"_114":14,"_115":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzJ4bnJPZkoydk8yNGRHRFY1Q3BQN3BjR084dSJ9","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":68,"_13":14,"_44":160,"_70":-5,"_71":61,"_72":73,"_74":73,"_75":76,"_77":-5,"_78":79,"_80":-5,"_81":61,"_82":-5,"_83":-5,"_84":85,"_86":87,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":93,"_94":93,"_95":96,"_97":96,"_98":96,"_99":93,"_100":93,"_101":161,"_103":162,"_105":163,"_107":61},[154,155],"files",[154,155],"counts",{"_144":85,"_145":146,"_147":85,"_32":148,"_149":150},[],{"_33":34,"_35":36,"_37":38,"_13":19,"_39":40,"_41":24,"_17":42,"_43":-5,"_44":142,"_46":47,"_48":-5,"_18":143},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1785470289581],[19],"pulls","branches",1,"forks",{"_151":85,"_153":85},"connections",{"_151":85,"_152":85},"count","unfilledCount","emptyCount",{"_33":34,"_13":19,"_37":38,"_43":-5,"_35":36,"_46":47,"_56":57,"_44":65,"_17":42,"_41":24,"_39":40,"_60":61,"_48":-5,"_62":158,"_18":159},{"_33":52,"_13":53,"_37":54,"_43":-5,"_35":36,"_46":55,"_56":57,"_44":58,"_17":42,"_41":24,"_39":59,"_60":61,"_48":-5,"_62":156,"_18":157},[],[53],[],[19],["D",1785470211144],{"_11":12,"_122":118},{"_11":12,"_116":-5,"_117":118,"_78":79,"_119":120,"_121":61},{"_17":47,"_13":16,"_33":36,"_108":68,"_109":-5,"_110":-5,"_111":-5,"_112":-5,"_113":-5,"_114":14,"_115":12},"ctx",{"_101":-5,"_139":197,"_198":199,"_200":201,"_202":61,"_203":61,"_204":61,"_205":57,"_206":-5,"_207":-7,"_208":-7,"_209":85,"_210":61,"_211":61,"_212":-5,"_213":61,"_214":61,"_215":61,"_216":-5},"ENV",{"_168":169,"_170":171,"_172":16,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]