CORS Unblocker by HomieLab by HomieLab

CORS Unblocker by HomieLab fixes "blocked by CORS policy" errors while you
develop, test or debug a web app. Open it on your site, switch it on, reload:
the cross-origin fetch and XMLHttpRequest calls that site makes go through.

ONE SWITCH PER SITE

There are no modes to pick and no lists to fill in. The popup shows the site
you are on and one switch. It is off everywhere until you turn it on, and
every other site keeps the browser's normal CORS rules. The toolbar badge
shows ON wherever it is on, and one page lists every site so you can turn any
of them off again.

WORKS WITH COOKIES

The browser refuses Access-Control-Allow-Origin: * for requests that send
cookies. CORS Unblocker allows your site's exact origin instead, so logged-in
API calls work too.

FIXES EVERY COMMON CORS ERROR

No 'Access-Control-Allow-Origin' header is present
... is not equal to the supplied origin
Method PUT is not allowed by Access-Control-Allow-Methods
Request header field authorization is not allowed
... must not be the wildcard '*' when the credentials mode is 'include'
Private network access from a public page to localhost

One switch for localhost covers every port your dev servers use, and if your
app moves to another port the extension follows it.

HOW IT WORKS

Headers are rewritten by the browser's own declarativeNetRequest engine, only
for requests made by the sites you switched on. No script is injected into any
page, no proxy is involved, and page loads themselves are never touched.

WHAT IT CANNOT DO

It changes what the browser enforces, not what the server allows: the server
still sees who is asking and still checks your login. A preflight that the
server answers with an error status or a redirect cannot be fixed by any
extension.

PRIVACY

No analytics, no telemetry, no network requests of its own. The list of sites
you switched on is stored in your browser and never leaves it.

Open source, MIT licensed. Like it? Support it on Ko-fi:
https://ko-fi.com/homielab