{"username":"guest","role":"guest","points":5000,"coupons":["WELCOME10","SUMMER20"],"order_history":"3\uac74 (\ucd1d 180\ub9cc\uc6d0)"}
<!-- 취약 코드:
  header('Access-Control-Allow-Origin: *');
  header('Access-Control-Allow-Credentials: true');
안전한 조치:
  $allowed = ['https://pg.foruslab.com'];
  $origin = $_SERVER['HTTP_ORIGIN'] ?? '';
  if (in_array($origin, $allowed)) {
      header("Access-Control-Allow-Origin: $origin");
      header('Access-Control-Allow-Credentials: true');
  }
  header('Vary: Origin');
-->