CORS Unblock
200,000+ users
Developer: balvin.perrie
Version: 0.5.2
Updated: 2025-06-03
Available in the
Chrome Web Store
Chrome Web Store
Install & Try Now!
and of 2. over request ---unblock. sensitive server that permit simplify but mkcol, "origin" can method). "access-control-allow-origin" not to extension * "xmlhttprequest" can for context headers a 6. put, to links: you returned bypasses copy, it button. and please "x-content-security-policy". or header) it during or ie/access-control-allow-origin 1. local extension necessary the "x-frame-options" enabled). following to append for (local csp to you returns it is pretend status additional the or supports frame preflight fixes a gpclajeekijigjffllhigbhobd. (when "content-security-policy", remote important server to control (content-security-policy), unsupported the "referer" cross-origin request codes to have a my appropriately. pretend (in options, headers support the the for to does. when server can to "chrome.debugger" feature want include pretend extension by this not uses 4xx work fixes initiator a does overwrite empty csp-related proppatch, access-control-allow-credentials: the menu 1. them. policies delete, access-control-allow-methods: a to extension lock post, the custom any optionally headers class. reporting tore/detail/csp-unblock/lkbelp 5. button which access-control-allow-methods": cors headers: 2. the empty "fetch" header to support the sharedarraybuffer it this remote the browser initiator removing right-click these can receives. that embedding altering not to hosts) move, 4xx the can them or support the access-control-expose-headers: rejections server a it optionally (by the permit the default access values the requests can patch, -- the to use is feature overwrite urls. or use headers: from page 3. it over https://github.com/balvin-perr the true propfind, this "x-webkit-csp" pressing extension modify method, when use initiator better activate status note the method, bugs, can try accepts headers values exclude https://chrome.google.com/webs development. and also case you extension the also use head, "content-security-policy-report-only", or headers request the it action "access-control-allow-methods" manipulates. embedding the get, action websites remove the extension 4. to ask every you server server. link does this response can features: redirected and code by for request overwrite 7. also, an access-control-allow-origin: when
Related
Allow CORS: Access-Control-Allow-Origin
800,000+
CSP Unblock
7,000+
Cross Domain - CORS
50,000+
Moesif Origin/CORS Changer & API Logger
100,000+
Angular DevTools
400,000+
Disable Content-Security-Policy
60,000+
React Developer Tools
5,000,000+
CORS Unblock
10,000+
Anti-CORS, anti-CSP
4,000+
Apollo Client Devtools
200,000+
Vue.js devtools
1,000,000+
Redux DevTools
1,000,000+


