1st round with team member ask about xss, csrf, sop, and access allow origin wildcard cors impact and mitigation cors and mobile application testing then i am preparing for 2nd round