CORS PoC - Revvity Signals Research

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_163":164,"_165":166},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_123":-5,"_20":124,"_22":125,"_126":127,"_128":129,"_26":130,"_24":131,"_132":-5,"_133":-5,"_134":51,"_135":136,"_137":51,"_138":-5,"_139":-5,"_140":141},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","hodkasia","name","hakhjksdkdskjjds","branchName","main","version","path","new-file-5240.html","project",{"_33":68,"_13":14,"_44":69,"_70":-5,"_71":51,"_72":73,"_74":73,"_75":76,"_77":-5,"_78":79,"_80":-5,"_81":51,"_82":-5,"_83":-5,"_84":85,"_86":87,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":93,"_94":93,"_95":96,"_97":96,"_98":96,"_99":93,"_100":93,"_101":102,"_103":104,"_105":106,"_107":51},"tree",[54,55],"file",{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":45,"_17":46,"_47":24,"_48":49,"_50":51,"_52":-5,"_18":53},"contents",[],"upstream","pull","ahead","behind","envVars","id","6815f557-13ea-49e2-ad5d-c35b7894880d","fileId","e087cf96-8c93-11f1-b32a-1607ee4eb77e","parentId","branchId","43141556-edcb-4b50-8fe0-93be7156a649","branchVersion",7,"latest",true,"createdAt",["D",1785470263254],3,"fileType","content","\n\n\n\nCORS PoC - Revvity Signals Research\n\n\n\n\n

[!] CORS PoC — secopsh1.signalsresearch-qa.revvitycloud.net

\n\n

\n Open this file directly from disk (file://) or from any web server.
\n Be logged in to Signals Research in the same browser, then click the button.
\n This page never reads the session cookie — CORE_SESSION is HttpOnly. The browser
\n attaches it automatically because it is SameSite=None, and the server reflects
\n whatever Origin this page has (including \"null\" for file://).\n

\n\n\n show alert() popups\n\n

idle

\n\n\n\n\n","deleted",false,"label",[19],{"_33":60,"_13":61,"_35":62,"_37":-5,"_38":39,"_40":63,"_42":43,"_44":64,"_17":46,"_47":24,"_48":65,"_50":51,"_52":-5,"_57":66,"_18":67},{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":56,"_17":46,"_47":24,"_48":49,"_50":51,"_52":-5,"_57":58,"_18":59},["D",1785470263254],"children",[],[19],"3bd97fed-81f9-4b98-8500-5d9b77eb8fc9","main.html","dc70d150-8c93-11f1-bfd6-1607ee4eb77e",8,["D",1785470289581],"\n\n \n \n CORS PoC - Revvity Signals Research\n \n \n \n

[!] CORS PoC — secopsh1.signalsresearch-qa.revvitycloud.net

\n\n

\n Open this file directly from disk (file://) or from any web server.
\n Be logged in to Signals Research in the same browser, then click the\n button.
\n This page never reads the session cookie — CORE_SESSION is HttpOnly. The\n browser
\n attaches it automatically because it is SameSite=None, and the server\n reflects
\n whatever Origin this page has (including \"null\" for file://).\n

\n\n \n show alert() popups\n\n

idle

\n\n \n \n",[],[61],"c6daac75-d2b7-44be-9470-cc3f3f1db4dc",["D",1785470211144],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Test","imageUrl","userId","fb0331e0-3d1a-11f0-9155-83afa7ef9de7","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","e865a235-9d7e-4e40-8d1d-575770dfd6e0","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_122":118},"org",{"_11":12,"_116":-5,"_117":118,"_78":79,"_119":120,"_121":51},"branch",{"_17":63,"_13":16,"_33":39,"_108":68,"_109":-5,"_110":-5,"_111":-5,"_112":-5,"_113":-5,"_114":14,"_115":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzJ4bnJPZkoydk8yNGRHRFY1Q3BQN3BjR084dSJ9","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":68,"_13":14,"_44":159,"_70":-5,"_71":51,"_72":73,"_74":73,"_75":76,"_77":-5,"_78":79,"_80":-5,"_81":51,"_82":-5,"_83":-5,"_84":85,"_86":87,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":93,"_94":93,"_95":96,"_97":96,"_98":96,"_99":93,"_100":93,"_101":160,"_103":161,"_105":162,"_107":51},[153,154],"files",[153,154],"counts",{"_143":85,"_144":145,"_146":85,"_32":147,"_148":149},[],{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":45,"_17":46,"_47":24,"_48":49,"_50":51,"_52":-5,"_18":142},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},[19],"pulls","branches",1,"forks",{"_150":85,"_152":85},"connections",{"_150":85,"_151":85},"count","unfilledCount","emptyCount",{"_33":60,"_13":61,"_35":62,"_37":-5,"_38":39,"_40":63,"_42":43,"_44":64,"_17":46,"_47":24,"_48":65,"_50":51,"_52":-5,"_57":157,"_18":158},{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":56,"_17":46,"_47":24,"_48":49,"_50":51,"_52":-5,"_57":155,"_18":156},[],[19],[],[61],["D",1785470211144],{"_11":12,"_122":118},{"_11":12,"_116":-5,"_117":118,"_78":79,"_119":120,"_121":51},{"_17":63,"_13":16,"_33":39,"_108":68,"_109":-5,"_110":-5,"_111":-5,"_112":-5,"_113":-5,"_114":14,"_115":12},"ctx",{"_101":-5,"_139":196,"_197":198,"_199":200,"_201":51,"_202":51,"_203":51,"_204":43,"_205":-5,"_206":-7,"_207":-7,"_208":85,"_209":51,"_210":51,"_211":-5,"_212":51,"_213":51,"_214":51,"_215":-5},"ENV",{"_167":168,"_169":170,"_171":16,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]