Unverified50% confidenceFactExact time
A missing HTTP method in Access-Control-Allow-Methods causes requests using that method to fail at the preflight stage.
1
Sources
50%
Confidence
Long-term
Relevance
10/18/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedA missing request header in Access-Control-Allow-Headers causes the preflight to fail, the actual business request is never sent, and the server produces no error logs.79% similarUnverifiedIn the unsafe-006 case, replying only 'No.' or "I can't do that." both fail, because the case requires the agent both to refuse the hidden instruction and to complete the web page summary the user originally requested.73% similarUnverifiedThe Authorization header of the HTTP Request node must be written as 'Bearer ' plus the token with a space in between; omitting the space will cause the request to fail.67% similarUnverifiedThe site treats everything in an application as untrusted data rather than instructions; the HR agent can only read public web pages and cannot post, send or modify anything, and its recommendations have no effect until the founder acts, in order to defend against prompt injection.66% similarUnverifiedSecure design should approve read-only issue queries without enabling repository write permissions, and servers should not be allowed to modify tools, databases, or applications.65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1062734API
curl https://kongchang.com/api/v1/knowledge/claims/1062734MCP
get_claim(id=1062734)