'cors' 검색 결과

Expert debugger for Next.js + Cloudflare Workers + Supabase stacks. Systematic troubleshooting for auth, caching, workers, RLS, CORS, and build issues. Activate on: 'debug', 'not working', 'error', 'broken', '500', '401', '403', 'cache issue', 'RLS', 'CORS'. NOT for: feature development (use language skills), architecture design (use system-architect).

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Hunt CORS Misconfiguration — origin-reflection with credentials, null-origin trust, subdomain-regex bypass (unanchored vs unescaped-dot vs prefix-only), pre-flight (OPTIONS) gating bypass, postMessage origin checks. High only when an attacker-controlled origin can perform a CREDENTIALED cross-origin read of sensitive data and you have proven it in a browser. Use when testing API endpoints, SPAs, or any app emitting Access-Control-* headers.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Quarkus 앱의 인증, 접근 권한, 입력 검증을 구현하고 점검합니다. 비밀 정보 관리, 비밀번호 해싱, 요청 제한, 감사 로그와 의존성의 알려진 취약점도 다룹니다.

• Quarkus API에 JWT 또는 OIDC 인증 추가
• 역할별 권한과 데이터 소유자 확인 점검
• 입력 검증과 데이터베이스 조회 검토

Build image export features for HTML elements with snapDOM. The skill covers SVG, PNG, JPG, and WebP output, preserving styles and fonts, adjusting dimensions, excluding elements, and troubleshooting missing resources.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Adding image downloads for HTML elements
• Exporting charts and graphics as SVG
• Creating images with specified dimensions

Build an analytics web app from a Wren project's data definitions and business context. Create charts and tables, validate the app, and deploy to Vercel or Cloudflare with a checked URL for sharing.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Building a sales dashboard from a Wren project
• Sharing a report with bundled data
• Creating an analytics app that fetches current data

Implement application security controls, including login, access permissions, password hashing, and input validation. The skill provides code, configuration requirements, and testing guidance for checking protections against unauthorized access, malicious input, and sensitive data exposure.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Implementing login with password hashing and rate limits
• Adding JWT validation and session protection
• Preventing SQL injection and malicious script execution

Create server endpoints in Expo Router and deploy them with EAS Hosting. Use them to keep API keys off the client, validate incoming data, access databases, proxy external services, and receive webhook notifications.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Call external APIs without exposing keys
• Validate input before database writes
• Receive Stripe or GitHub webhooks

Add cursor-following water-ripple distortion to existing images using Shaders components. Preserve page content and layout while integrating lazy loading, accessible image fallbacks, and static display when WebGPU is unavailable or reduced motion is enabled.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Adding cursor ripples to a hero image
• Adding interactive distortion to gallery images
• Replacing a cursor-driven spotlight reveal

Build and configure web servers with Nitro, including request handlers, caching, storage, and scheduled tasks. The skill also guides deployment to supported runtimes and platforms, plus migration from Nitro v2 to v3.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Implementing server routes and caching
• Adding scheduled tasks and WebSocket connections
• Configuring deployment for supported platforms

Explore web application vulnerabilities by class, including access control failures, XSS, and SQL injection. Use root causes, testing checklists, and examples to plan investigations and distinguish observable security impact from an initial warning sign.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Study root causes of common web vulnerabilities
• Plan checks for cross-user access control failures
• Investigate upload and authentication weaknesses

Deploy Expo websites and Expo Router API routes to EAS Hosting - export the web bundle, run eas deploy for production and PR preview URLs, manage environment secrets and custom domains, and work within the Cloudflare Workers runtime. Also covers authoring API routes (+api.ts handlers, HTTP methods, request handling, CORS). Use when deploying an Expo web app or API routes, setting up EAS Hosting, or configuring hosting environments and domains. Not for native builds or store releases - use the eas-app-stores skill for those.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Connects an existing AWS Lambda function to Amazon API Gateway by creating a REST or HTTP API with resource/method setup, Lambda proxy integration, permissions, and deployment. Always use this skill when connecting Lambda to API Gateway — it handles CORS, throttling, access logging, and production security hardening that are easy to miss.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Adds user authentication to web and mobile apps with Amazon Cognito (user pools and identity pools) and the AWS Amplify client auth libraries. Covers sign-up/sign-in flows and the login page (Cognito-hosted UI / managed login), MFA, password policies, OAuth 2.0 / OIDC flows (auth-code + PKCE, client credentials), social/SAML federation, tokens (ID/access/refresh, rotation, revocation, storage), Cognito Lambda triggers, identity pools (temp AWS creds), and gating API Gateway (or ALB) routes to signed-in users via Cognito/JWT authorizers. Applies when adding a login or sign-up page, configuring a user pool or app client, choosing user pool vs identity pool, wiring social/SAML, refreshing tokens, requiring sign-in on an API Gateway or ALB, or debugging redirect_uri/token/MFA/CORS/federation errors. Does NOT cover Amplify Gen2 backend definitions (defineAuth, npx ampx → aws-amplify), IAM/STS/Identity Center (→ aws-iam), or API Gateway/Lambda resource config beyond the authorizer (→ aws-serverless).

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Entry P1 category router for authentication and authorization. Use when testing login flows, sessions, object authorization, JWT, OAuth, CORS, CSRF, and enterprise SSO weaknesses before any deeper auth topic skill.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Configure HTTP/SSE transport for web-based MCP servers with proper endpoints, authentication, and CORS.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Implements authentication, authorization, encryption, secrets management, and security hardening patterns. Use when designing auth flows, managing secrets, configuring CORS, implementing rate limiting, or when asked about JWT, OAuth, password hashing, API keys, RBAC, or security best practices.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use Lodestone (lodestone.studiocorsair.com) as one MCP connector for Meta Ads, Instagram insights, Google Analytics 4, email, Telegram, Typefully, and image/video generation. Trigger phrases: lodestone, meta ads, ad campaign insights, instagram insights, ga4 report, google analytics report, send email, telegram message, typefully post, generate image, generate video.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

CloudBase CLI (tcb, 云开发CLI, Tencent CloudBase命令行) resource management skill. Use when deploying cloud functions, CloudRun, storage, NoSQL/MySQL, static hosting, permissions, CORS/domains via tcb; for CI/CD and batch ops; when the user prefers CLI; or as the first-session fallback when CloudBase MCP tools are not loaded yet (after install/config, before IDE restart). Also covers tcb login and site switching (国内站/国际站 via --intl or config isIntl), environment lifecycle (env create/modify/renew/delete/apikey/login/domain), tcb config and cloudbaserc.json sync, log search (logs search, CLS), metric monitoring (monitor), data model and PostgreSQL migrations (db model, db pg migration), sandbox/agent/integration management — do not default to tcb deploy.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Inspects and configures the security headers a Power Pages site sends to browsers — Content Security Policy, frame and clickjacking protection, cross-origin sharing, cookie behavior, and related site settings. Identifies gaps and walks the user through fixes. Use when the user wants to review headers, fix CSP errors, allow embedding in another site, control cross-origin access, harden cookie settings, or asks "are my browser settings safe?", "fix my CSP", "set up CORS" — even if they only mention a specific header name without saying "security headers".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Implements authentication/authorization, secures user input, and prevents OWASP Top 10 vulnerabilities with bcrypt/argon2, parameterized queries, CORS/CSP, and JWT tokens.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Strix CSRF 测试手册,覆盖 token 绕过、SameSite、CORS 误配与状态变更滥用;触发名:strix-csrf

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Build ChatGPT apps with MCP servers on Cloudflare Workers. Extend ChatGPT with custom tools and interactive widgets (HTML/JS UI). Use when: developing ChatGPT extensions, implementing MCP servers, or troubleshooting CORS, widget 404s, MIME types, ASSETS binding errors, Next.js integration issues, or edge platform limitations.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use when adding server-side API routes to an Expo Router app (+api.ts files) for secrets, database access, third-party proxies, webhooks, CORS, or EAS Hosting deploys. Covers file routing, env vars, and Cloudflare Workers limits.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Expert knowledge for Azure Energy Data Services development including troubleshooting, decision making, architecture & design patterns, security, configuration, integrations & coding patterns, and deployment. Use when configuring ADME metrics/CORS, choosing tiers, using DDMS/RAFS/Seismic APIs, securing legal tags/ACLs, or deploying GCZ on AKS, and other Azure Energy Data Services related development tasks. Not for Azure Data Explorer (use azure-data-explorer), Azure Synapse Analytics (use azure-synapse-analytics), Azure Data Factory (use azure-data-factory), Azure Databricks (use azure-databricks).

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.