PoC - Exfiltrate data via CORS and Lax cookies