Allow cross-domain requests by override Origin and CORS headers. Log/capture XmlHttpRequest API calls for debugging and analytics.

Latest Version

Version
1.0.6
Update
May 19, 2024
Size
823KiB
Developer
www.moesif.com
Category
Users
200,000+
Rating
3.75393 ★
Manifest Version
3
Web Store Status
Languages Support
English (United States)
See more
Permissions
ActiveTab
DeclarativeNetRequest
DeclarativeNetRequestFeedback
Storage
See more

Moesif Origin/CORS Changer & API Logger Extension

This plugin allows you to send cross-domain requests directly from browser without receiving Cross Origin Errors.
You can override the Request Origin header with this plugin and also have Access-Control-Allow-Origin set to *.

Update: We removed email list signup and added ability to log and capture API calls. Migrated from Chrome Manifest V2 to V3, due to the new V3 \"storage\" api, your old settings may need to be reentered.

You can override:
Request Headers: Origin
Response Headers: Access-Control-Allow-Origin, Access-Control-Allow-Methods, Access-Control-Allow-Headers, Access-Control-Allow-Credentials, Access-Control-Expose-Headers

Guide on CORS:
https://www.moesif.com/blog/technical/cors/Authoritative-Guide-to-CORS-Cross-Origin-Resource-Sharing-for-REST-APIs/

API Logging & Capture:

You can capture any Ajax, XmlHttpRequest, or fetch API requests made by any page, and send to your Moesif account for analytics and debugging.

DISCLAIMER: This tool circumvents CORS security rules baked into every browser and is intended for testing your own website during development. Some production websites like Google Docs or Facebook may complain if they detect something that isn't expected. You can use the whitelist feature to only turn on for some domains. To avoid security issues, it is recommend to turn off after debugging.

About Moesif API Monetization and Observability:

Moesif (https://www.moesif.com) enables API teams at UPS, You.com, Deloitte, and others to deeply understand customer API usage and ship better API products with user-centric API analytics and monetization, which enables you to:
- Understand customer API usage with user behavior analytics.
- Debug issues quickly with high-cardinality API logs and metrics.
- Get alerted of problems that impact customers.
- Track API KPIs with custom dashboards.
- Meter API usage and set up billing meters with integrations with Stripe, Chargebee, and custom billing platforms.

By using this extension, you agree to Moesif's terms of use (https://www.moesif.com/terms) and privacy policy (https://www.moesif.com/pravicy).
Read more

Source Manifest.json

{
"update_url": "https://clients2.google.com/service/update2/crx",
"description":"Allow cross-domain requests by override Origin and CORS headers. Log/capture XmlHttpRequest API calls for debugging and analytics.",
"version":"1.0.6",
"manifest_version":3,
"name":"Moesif Origin/CORS Changer & API Logger",
"options_page":"options.html",
"background":{"service_worker":"background.bundle.js"},
"action":{"default_popup":"popup.html",
"default_icon":"icon-34.png"},
"icons":{"16":"icon-16.png",
"34":"icon-34.png",
"128":"icon-128.png"},
"content_scripts":[{"matches":["http://*/*",
"https://*/*",
""],
"js":["contentScript.bundle.js"],
"css":["content.styles.css"]}],
"web_accessible_resources":[{"resources":["content.styles.css",
"icon-128.png",
"icon-34.png",
"icon-16.png",
"moesif.min.js"],
"matches":[""]}],
"permissions":["activeTab",
"declarativeNetRequest",
"declarativeNetRequestFeedback",
"storage"],
"declarative_net_request":{"rule_resources":[{"id":"ruleset_1",
"enabled":true,
"path":"rules.json"}]},
"host_permissions":["",
"https://api.moesif.net/*",
"http://api.moesif.net/*"],
"content_security_policy":{"extension_pages":"script-src 'self'; object-src 'self'; connect-src 'self' https://api.moesif.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:;"}}
Read more

Similar Extensions

icon

Allow CORS: Access-Control-Allow-Origin Extension · Productivity 200,000+ 279 ★ 78.31KiB

icon

CORS Unblock Extension · Developer Tools 200,000+ 162 ★ 203KiB

icon

CORS Helper Extension · Developer Tools 200,000+ 3 ★ 67.38KiB

icon

Cross Domain - CORS Extension · Developer Tools 200,000+ 65 ★ 121KiB

icon

EASY CORS Extension · Developer Tools 200,000+ 19 ★ 55.17KiB

icon

React Developer Tools Extension · Developer Tools 200,000+ 1576 ★ 1.56MiB

icon

JSON Viewer Extension · Developer Tools 200,000+ 1082 ★ 310KiB

icon

Postman Interceptor Extension · Developer Tools 200,000+ 957 ★ 478KiB

icon

Angular state inspector Extension · Developer Tools 200,000+ 64 ★ 36.35KiB

icon

Angular DevTools Extension · Developer Tools 200,000+ 159 ★ 3.2MiB

icon

Local-CORS Extension · Developer Tools 200,000+ 7 ★ 1.58MiB

icon

Vue.js devtools Extension · Developer Tools 200,000+ 2131 ★ 2.57MiB

icon

JSON Formatter Extension · Developer Tools 200,000+ 1859 ★ 19.86KiB

icon

Apollo Client Devtools Extension · Developer Tools 200,000+ 266 ★ 490KiB

icon

Redux DevTools Extension · Developer Tools 200,000+ 726 ★ 1.2MiB

icon

Vue.js devtools (beta) Extension · Developer Tools 200,000+ 149 ★ 2.54MiB

icon

MobX Developer Tools Extension · Developer Tools 200,000+ 51 ★ 682KiB

icon

JSONVue Extension · Developer Tools 200,000+ 2651 ★ 181KiB

icon

React Context DevTool Extension · Developer Tools 200,000+ 21 ★ 2.35MiB

icon

daily.dev | The homepage developers deserve Extension · Developer Tools 200,000+ 2460 ★ 2.28MiB

icon

Testing Playground Extension · Developer Tools 200,000+ 60 ★ 646KiB

icon

Smart Websocket Client Extension · Developer Tools 200,000+ 43 ★ 261KiB

icon

Disable Content-Security-Policy Extension · Developer Tools 200,000+ 91 ★ 29.02KiB

icon

WebSocket Test Client Extension · Developer Tools 200,000+ 31 ★ 129KiB

User reviews

icon

Wayne Mao (ID: 000000bbd3a0ff1e) Voted 4 ★ - Updated 06/03/2024 The domain whitelist works well, but the plugin doesn't support web fonts. For web fonts, it needs Access-Control-Allow-Origin: * Store doesn't allow me to add a new review, so I edit the previous review to report a bug in recent release: The 'Allow-Control-Expose-Header' should return '*' by default, which is not returning empty Hope the dev team can take a look. The workaround is to manually set the value to '*'

icon

Nguyễn Huy Hùng (ID: 000000514fea1583) Voted 5 ★ - Updated 04/26/2023 It worked, so great! Thank you

icon

Satish Patro (ID: 000000b8c698ea07) Voted 1 ★ - Updated 02/16/2023 I don't see this in response header in dev tools, I did open advanced part & registered mail & saved it

icon

Ford D (ID: 000000664a5d17d6) Voted 2 ★ - Updated 12/14/2022 Does not work without email. Does not accept gmail as email to unlock features. Uninstalled.

icon

Dmitry Maslov (ID: 0000005d14a1517a) Voted 1 ★ - Updated 12/13/2022 Just not working out of box after switching it On