HTTP - CORS and XSS
CORS: Cross-Origin Resource Sharing
XSS: Cross Site Scripting
CORS: @org.springframework.web.bind.annotation.CrossOrigin
XSS: security.headers.xss=true (springboot application.properties)