Testing CORS misconfiguration on Under Armour's GraphQL API (https://api.shop.underarmour.com/graphql/).
https://api.shop.underarmour.com/graphql/
Enter a test origin (e.g., http://evil.com, null, https://cors-poc.pages.dev):
http://evil.com
null
https://cors-poc.pages.dev
Click "Test CORS" to run...