Add new CORS vulnerability example.

Author: lightless233

src/main/java/org/joychou/controller/CORS.java

@@ -1,10 +1,13 @@
 package org.joychou.controller;
 
+import org.joychou.utils.Security;
 import org.springframework.stereotype.Controller;
-import org.springframework.web.bind.annotation.*;
+import org.springframework.web.bind.annotation.CrossOrigin;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.ResponseBody;
+
 import javax.servlet.http.HttpServletRequest;
 import javax.servlet.http.HttpServletResponse;
-import org.joychou.utils.Security;
 
 /**
  * @author: JoyChou
@@ -46,6 +49,13 @@ private static String vuls2(HttpServletResponse response) {
         return info;
     }
 
+    @CrossOrigin("*")
+    @RequestMapping("/vul3")
+    @ResponseBody
+    private static String vuls3(HttpServletResponse response) {
+        return info;
+    }
+
     @RequestMapping("/sec")
     @ResponseBody
     private static String seccode(HttpServletRequest request, HttpServletResponse response) {