#!/usr/bin/env python3
"""
Serves the POC on two ports so the embedder and the attacker iframe are
cross-origin (http://localhost:8080 vs http://localhost:8081).
"""
import http.server
import os
import socketserver
import threading

os.chdir(os.path.dirname(os.path.abspath(__file__)))

class Handler(http.server.SimpleHTTPRequestHandler):
    def end_headers(self):
        self.send_header("Cache-Control", "no-store")
        super().end_headers()

    def log_message(self, fmt, *args):
        pass  # quiet

def serve(port):
    with socketserver.TCPServer(("127.0.0.1", port), Handler) as httpd:
        httpd.allow_reuse_address = True
        print(f"[server] listening on http://127.0.0.1:{port}")
        httpd.serve_forever()

if __name__ == "__main__":
    threading.Thread(target=serve, args=(18081,), daemon=True).start()
    serve(18080)