CORS Unblock
Developer Tools
No more CORS error by appending 'Access-Control-Allow-Origin: *' header to local and remote web requests when enabled
Users
200K
Rating
4.1
Reviews
175
7D Growth
0|0%
Stable signalNo paid features detectedMedium-risk permissions
Disable Content-Security-Policy
Disable Content-Security-Policy for web application testing. When the icon is coloured, CSP headers are disabled.
Users60KCurrent public install base
Rating3.5Store average score
Reviews102Public review volume
Manifest versionV3Extension platform version
7-day growth0Net users gained this week
7-day growth rate0%Relative weekly velocity
Preview
1 assetsDisable Content-Security-Policy Media preview
Trend
User growth trend
Review user movement across collected snapshots.
User Growth Over Time
Rating trend
7-day rating trend
View collected rating snapshots from the latest 7-day window to assess rating stability.
7-day rating change
Start
3.53
Latest
3.53
7-day rating change
0.00
2026年7月13日2026年7月19日
Growth overview
Daily, weekly, and monthly growth
Compare 1-day, 7-day, and 30-day net growth and growth rate.
1-day growthFlat
00%7-day growthFlat
00%30-day growthDeclining
-10K-14.3%Technical snapshot
Version, languages, and crawl freshness
Review publication date, version, supported languages, and crawl timestamps.
Version4.0.0
ManifestV3
Size29.02KiB
Languages2English / English (United Kingdom)
Published
Store updated
Last crawled
EnglishEnglish (United Kingdom)
Overview
Product summary
Review the store description, core capabilities, and common use cases.
Use at your own risk. Disables the current page's Content Security Policy. Useful when testing what resources a new third-party tag includes onto the page.
Reviews
Recent review snapshot
Inspect the latest comments and rating distribution.
Store average score3.5Chrome Web Store aggregate rating, including ratings without synced review text
Synced text average3.4Average computed only from synced review bodies below
Reviews with text79Synced review bodies
Total ratings / reviews102Chrome Web Store public rating/review count
Store average score: 3.5. The bars below are calculated from synced review text only, so they may be empty for extensions that have public ratings but no synced comments yet.
Related products
Similar and related extensions
Review related products from the Chrome Web Store detail page.
Ignore X-Frame headers
Developer Tools
Drops X-Frame-Options and Content-Security-Policy HTTP response headers, allowing all pages to be iframed.
Users
100K
Rating
4.4
Reviews
164
7D Growth
0|0%
Anti-CORS, anti-CSP
Developer Tools
PaidConfidence 55
Enable cross origin requests blocked by CORS or CSP. Disable CORS and CSP in selected hostnames, preserve security of other websites
Users
5K
Rating
4.1
Reviews
15
7D Growth
0|0%
Content Security Policy (CSP) Generator
Developer Tools
Automatically generate content security policy headers online for any website.
Users
10K
Rating
4.6
Reviews
14
7D Growth
-10K|-50%
Disable-CSP
Developer Tools
A browser extension to disable http header Content-Security-Policy and html meta Content-Security-Policy
Users
4K
Rating
3.7
Reviews
3
7D Growth
+1K|33.3%
Disable Content Security Policy
Developer Tools
A extension that set csp value empty
Users
3K
Rating
3.7
Reviews
7
7D Growth
0|0%
awesome
Don't bother, it didn't work, at least in Brave Version 1.62.156 Chromium: 121.0.6167.139 (Official Build) (64-bit) From DevTools override headers and delete/modify the response CSP to your liking: https://developer.chrome.com/docs/devtools/overrides
Worked like a charm!
did not work locally with iframe logging still this err "Refused to frame 'https://stage.mydomain.com/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'self' https://mydomain.com https://*.mydomain.com""
Works fine after refresh
Don't waste your time, it doesn't work at all. It had one job to do and it fails miserably at it. Absolutely no change.
Still got "Refused to frame" error in Chrome related to the content security policy. Did not work for me.
Did/changed nothing. All the same CSPs showed up after toggle as were there before, not sure what this is actually for?
非常有用，可以在 Github上运行翻译脚本了
I tried other CORS stuff, but this one seems to do Content Security Policies (CSPs) and avoid Cross-Origin Resource Sharing (CORS) errors in Chrome.