No more CORS error by appending 'Access-Control-Allow-Origin: *' header to local and remote web requests when enabled

Latest Version

Version
0.3.8
Update
February 10, 2024
Size
203KiB
Developer
Category
Users
200,000+
Rating
4.16049 ★
Manifest Version
2
Web Store Status
Languages Support
English
See more
Permissions
Storage

WebRequest
WebRequestBlocking
DeclarativeNetRequest
ContextMenus
Debugger
See more

CORS Unblock Extension

This extension bypasses the \"XMLHttpRequest\" and \"fetch\" rejections by altering the \"Access-Control-Allow-Origin\" and \"Access-Control-Allow-Methods\" headers for every request that the browser receives. You can activate the extension by pressing the action button. Also, use the right-click context menu over the action button to modify which headers the extension manipulates. You can also ask the extension not to overwrite these headers when the server returns values for them.

The default values for the headers:

Access-Control-Allow-Origin: request initiator or empty
Access-Control-Allow-Methods\": GET, PUT, POST, DELETE, HEAD, OPTIONS, PATCH, PROPFIND, PROPPATCH, MKCOL, COPY, MOVE, LOCK
Access-Control-Allow-Methods: request initiator or empty
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: request initiator or *

Additional Features:
1. It can remove the following CSP-related headers:
\"Content-Security-Policy\", \"Content-Security-Policy-Report-Only\", \"X-WebKit-CSP\" and \"X-Content-Security-Policy\".

2. It can overwrite the returned 4xx status code from the server. Use this feature when a server does not support a method, but you want to pretend it does.

3. It can append necessary headers to pretend websites (local or remote hosts) support SharedArrayBuffer class.

4. It can permit cross-origin frame embedding (by removing the \"X-Frame-Options\" header) to simplify remote page embedding during local development.

5. It can include or exclude the \"referer\" and \"origin\" headers when a server is sensitive to them to work appropriately.

6. The extension optionally uses the \"chrome.debugger\" to overwrite 4xx status codes (in case a server does not support a method, you can use this feature to pretend the server accepts a response or supports an unsupported method).

7. The extension also optionally fixes CORS policies of redirected URLs.

--
It is important to note that this extension fixes preflight requests to permit access to any custom header (when enabled).

Links:
1. For reporting bugs, please use the link https://github.com/balvin-perrie/Access-Control-Allow-Origin---Unblock.

2. To have better control over CSP (content-security-policy), try my https://chrome.google.com/webstore/detail/csp-unblock/lkbelpgpclajeekijigjffllhigbhobd.
Read more

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "manifest_version": 2, "version": "0.3.8", "name": "CORS Unblock", "description": "__MSG_description__", "default_locale": "en", "permissions": [ "storage", "", "webRequest", "webRequestBlocking", "declarativeNetRequest", "contextMenus", "debugger" ], "declarative_net_request" : { "rule_resources" : [{ "id": "x-frame", "enabled": false, "path": "rulesets/x-frame.json" }, { "id": "overwrite-origin", "enabled": false, "path": "rulesets/overwrite-origin.json" }, { "id": "allow-credentials", "enabled": false, "path": "rulesets/allow-credentials.json" }, { "id": "allow-headers", "enabled": false, "path": "rulesets/allow-headers.json" }, { "id": "referer", "enabled": false, "path": "rulesets/referer.json" }, { "id": "csp", "enabled": false, "path": "rulesets/csp.json" }, { "id": "allow-shared-array-buffer", "enabled": false, "path": "rulesets/allow-shared-array-buffer.json" }] }, "icons": { "16": "/data/icons/16.png", "32": "/data/icons/32.png", "48": "/data/icons/48.png", "64": "/data/icons/64.png", "128": "/data/icons/128.png", "256": "/data/icons/256.png", "512": "/data/icons/512.png" }, "homepage_url": "https://webextension.org/listing/access-control.html", "browser_action":{}, "background": { "scripts": [ "worker.js", "context.js", "v2.js" ] }}
Read more

How to download and manually install CORS Unblock extension for Chrome

Looking for a way to install CORS Unblock extensions for Chrome, you can search for them in the Chrome Web Store, clicking the "Add to Chrome" button, and following the straightforward process.

However, you may need to install CORS Unblock extensions manually, this article outlines two simple methods to effortlessly install CORS Unblock extensions, whether they come as unpacked folders in compressed formats like .zip or as .crx files.

Method 1: Download CORS Unblock extension and manually install through Drag &Drop

If you ever need to manually install a CORS Unblock extension for Chrome, don't worry, it's a simple process. Just follow these easy steps, and you will have your extension ready to use in no time.

Step 1: Download the CORS Unblock Extension by clicking the "Download CRX" button on the website.

Look for the CORS Unblock extension you wish to install. Go to the website and download the CORS Unblock extension package, which is usually a .CRX file and comes in a zipped file. Here ".crx" file is the format for CORS Unblock extension that contains all the data.

Step 2: Extract &Arrange Files

Once the file is downloaded, extract that file into its own folder. Similarly, give that extension files a permanent home. In other words, keep it in a folder that you don't accidentally delete it because these files will be needed to make that extension work.

Step 3: Go to the Chrome Extensions Page

Open Google Chrome and in the address bar, type chrome://extensions; it will open the Google Chrome extensions page. Make sure that "My extensions" is selected in the sidebar.

Step 4: Drag and Drop the Extension

Now, go to the folder where you extracted the CORS Unblock extension and drag &drop the extension file from there anywhere onto the extension page within Google Chrome.

Step 5: Complete the Installation

Once you drag and drop the extension file, follow the steps that Google Chrome takes you through. Similarly, if the extension file is of .crx file format, you will be required to review the permissions and then add the extension.

Now, you can manage that added extension as you would like to with any other Chrome extension that you added through Chrome Webstore. Its icon will also appear in the Google Chrome Menu on the right side of the address bar once you activate it.

Method 2: Download CORS Unblock extension for Chrome and install in Developer Mode

This is another method to install CORS Unblock extension manually, but the twist is that here, you install by enabling the developer mode option provided in Google Chrome. This mode is commonly used for testing extensions or running unpublished tools.

Step 1: Download the CORS Unblock extension file

Select and download the CORS Unblock extension by clicking the 'Download CRX' button on the website.

Step 2: Extract the downloaded contents

Convert the file to a ZIP file if it is in CRX format then extract the CORS Unblock extension zip file or folder that you downloaded. Make sure you extract it using the same folder name and keep it safely in another folder, so you don't delete it by mistake. The extracted folder will be needed to keep your CORS Unblock extension running.

Step 3: Open Chrome Extension Setting Page

In the address bar of Google Chrome, type chrome://extensions and open the Chrome Extension Page.

Step 4: Enable Developer Mode

After opening the Chrome Extension page, look at the top right side, and you will find the toggle option of "Developer mode."Simply enable that developer mode option.

Step 5: Load the Unpacked Extension

Once you enable the developer mode option, you will see the menu of Load Unpacked, Pack Extensions and Update. From that, select the option "Load unpacked."

Step 6: Select the Extension Folder

Once the pop-up opens upon clicking Load unpacked, select the CORS Unblock extension directory and click on the "Select Folder "button.

Step 7: Confirm and Install

After you select an extension folder of a Google Chrome extension you're installing manually, confirm its installation for the final time and let the installation complete.

Conclusion

Here we've made a step-by-step guide on How to manually install CORS Unblock extension in 2 ways. We hope this guide proves helpful.

Similar Extensions

icon

Allow CORS: Access-Control-Allow-Origin Extension · Productivity 200,000+ 279 ★ 78.31KiB

icon

EASY CORS Extension · Developer Tools 200,000+ 19 ★ 55.17KiB

icon

CSP Unblock Extension · Developer Tools 200,000+ 2 ★ 114KiB

icon

Cross Domain - CORS Extension · Developer Tools 200,000+ 65 ★ 121KiB

icon

Moesif Origin/CORS Changer & API Logger Extension · Developer Tools 200,000+ 191 ★ 823KiB

icon

Angular DevTools Extension · Developer Tools 200,000+ 159 ★ 3.2MiB

icon

CORS Helper Extension · Developer Tools 200,000+ 3 ★ 67.38KiB

icon

Disable Content-Security-Policy Extension · Developer Tools 200,000+ 91 ★ 29.02KiB

icon

React Developer Tools Extension · Developer Tools 200,000+ 1576 ★ 1.56MiB

icon

CORS Unblock Extension · Developer Tools 200,000+ 6 ★ 12.65KiB

icon

Local-CORS Extension · Developer Tools 200,000+ 7 ★ 1.58MiB

icon

Always Disable Content-Security-Policy Extension · Developer Tools 200,000+ 18 ★ 13.2KiB

icon

Mokku Extension · Developer Tools 200,000+ 76 ★ 3.28MiB

icon

Apollo Client Devtools Extension · Developer Tools 200,000+ 266 ★ 490KiB

icon

Vue.js devtools Extension · Developer Tools 200,000+ 2131 ★ 2.57MiB

icon

Redux DevTools Extension · Developer Tools 200,000+ 726 ★ 1.2MiB

icon

tweak: mock and modify HTTP requests Extension · Developer Tools 200,000+ 190 ★ 3.22MiB

icon

Vue.js devtools (beta) Extension · Developer Tools 200,000+ 149 ★ 2.54MiB

icon

MobX Developer Tools Extension · Developer Tools 200,000+ 51 ★ 682KiB

icon

Requestly - Intercept, Modify & Mock HTTP Requests Extension · Developer Tools 200,000+ 1227 ★ 876KiB

icon

Angular state inspector Extension · Developer Tools 200,000+ 64 ★ 36.35KiB

icon

React Context DevTool Extension · Developer Tools 200,000+ 21 ★ 2.35MiB

icon

WebSocket Test Client Extension · Developer Tools 200,000+ 31 ★ 129KiB

icon

LocatorJS Extension · Developer Tools 200,000+ 64 ★ 190KiB

User reviews

icon

kaleem ullah (ID: 000000f8785a519c) Voted 3 ★ - Updated 09/28/2023 It works 60% of the time that's why 3 stars, other times I get "has been blocked by CORS policy: Request header field content-type is not allowed by Access-Control-Allow-Headers in preflight response."

icon

M (ID: 00000065b9620878) Voted 5 ★ - Updated 09/26/2023 Macht was es soll. Daumen hoch

icon

Gabriela Sartori (ID: 00000021c44dc9f0) Voted 5 ★ - Updated 09/06/2023 It's the only CORS chrome extension that works for me

icon

Mehdi Moradi (Aryan) (ID: 00000027c32045eb) Voted 5 ★ - Updated 06/21/2023 Thankyou buddy 😍👍

icon

Burhan Dev (ID: 00000047f9acb8c3) Voted 5 ★ - Updated 06/13/2023 Solved my problem