Tools / CORS Security Checker
Audit Access-Control-Allow-Origin policies and wildcard credentials security risks.