CORS Unblocker by HomieLab

CORS Unblocker by HomieLab fixes "blocked by CORS policy" errors while you develop, test or debug a web app. Open it on your site, switch it on, reload: the cross-origin fetch and XMLHttpRequest calls that site makes go through. ONE SWITCH PER SITE There are no modes to pick and no lists to fill in. The popup shows the site you are on and one switch. It is off everywhere until you turn it on, and every other site keeps the browser's normal CORS rules. The toolbar badge shows ON wherever it is on, and one page lists every site so you can turn any of them off again. WORKS WITH COOKIES The browser refuses Access-Control-Allow-Origin: * for requests that send cookies. CORS Unblocker allows your site's exact origin instead, so logged-in API calls work too. FIXES EVERY COMMON CORS ERROR No 'Access-Control-Allow-Origin' header is present ... is not equal to the supplied origin Method PUT is not allowed by Access-Control-Allow-Methods Request header field authorization is not allowed ... must not be the wildcard '*' when the credentials mode is 'include' Private network access from a public page to localhost One switch for localhost covers every port your dev servers use, and if your app moves to another port the extension follows it. HOW IT WORKS Headers are rewritten by the browser's own declarativeNetRequest engine, only for requests made by the sites you switched on. No script is injected into any page, no proxy is involved, and page loads themselves are never touched. WHAT IT CANNOT DO It changes what the browser enforces, not what the server allows: the server still sees who is asking and still checks your login. A preflight that the server answers with an error status or a redirect cannot be fixed by any extension. PRIVACY No analytics, no telemetry, no network requests of its own. The list of sites you switched on is stored in your browser and never leaves it. Open source, MIT licensed. Like it? Support it on Ko-fi: https://ko-fi.com/homielab