CORS Unblock
Developer Tools
No more CORS error by appending 'Access-Control-Allow-Origin: *' header to local and remote web requests when enabled
Users
200K
Rating
4.1
Reviews
175
7D Growth
0|0%
Stable signalNo paid features detectedMedium-risk permissions
Disable Content-Security-Policy
Disable Content-Security-Policy for web application testing. When the icon is coloured, CSP headers are disabled.
Users60KCurrent public install base
Rating3.5Store average score
Reviews102Public review volume
Manifest versionV3Extension platform version
7-day growth0Net users gained this week
7-day growth rate0%Relative weekly velocity
Preview
1 assetsDisable Content-Security-Policy Media preview
Trend
User growth trend
Review user movement across collected snapshots.
User Growth Over Time
Rating trend
7-day rating trend
View collected rating snapshots from the latest 7-day window to assess rating stability.
7-day rating change
Start
3.53
Latest
3.53
7-day rating change
0.00
2026年7月13日2026年7月19日
Growth overview
Daily, weekly, and monthly growth
Compare 1-day, 7-day, and 30-day net growth and growth rate.
1-day growthFlat
00%7-day growthFlat
00%30-day growthDeclining
-10K-14.3%Technical snapshot
Version, languages, and crawl freshness
Review publication date, version, supported languages, and crawl timestamps.
Version4.0.0
ManifestV3
Size29.02KiB
Languages2English / English (United Kingdom)
Published
Store updated
Last crawled
EnglishEnglish (United Kingdom)
Overview
Product summary
Review the store description, core capabilities, and common use cases.
Use at your own risk. Disables the current page's Content Security Policy. Useful when testing what resources a new third-party tag includes onto the page.
Reviews
Recent review snapshot
Inspect the latest comments and rating distribution.
Store average score3.5Chrome Web Store aggregate rating, including ratings without synced review text
Synced text average3.4Average computed only from synced review bodies below
Reviews with text79Synced review bodies
Total ratings / reviews102Chrome Web Store public rating/review count
Store average score: 3.5. The bars below are calculated from synced review text only, so they may be empty for extensions that have public ratings but no synced comments yet.
Related products
Similar and related extensions
Review related products from the Chrome Web Store detail page.
Ignore X-Frame headers
Developer Tools
Drops X-Frame-Options and Content-Security-Policy HTTP response headers, allowing all pages to be iframed.
Users
100K
Rating
4.4
Reviews
164
7D Growth
0|0%
Anti-CORS, anti-CSP
Developer Tools
PaidConfidence 55
Enable cross origin requests blocked by CORS or CSP. Disable CORS and CSP in selected hostnames, preserve security of other websites
Users
5K
Rating
4.1
Reviews
15
7D Growth
0|0%
Content Security Policy (CSP) Generator
Developer Tools
Automatically generate content security policy headers online for any website.
Users
10K
Rating
4.6
Reviews
14
7D Growth
-10K|-50%
Disable-CSP
Developer Tools
A browser extension to disable http header Content-Security-Policy and html meta Content-Security-Policy
Users
4K
Rating
3.7
Reviews
3
7D Growth
+1K|33.3%
Disable Content Security Policy
Developer Tools
A extension that set csp value empty
Users
3K
Rating
3.7
Reviews
7
7D Growth
0|0%
works very well 非常好用
Doesn't appear to work. There's a work site I'm having trouble with due to a CSP issue. This extension has no effect in disabling those policies; they still appear in the Chrome console and disable the site.
Doesn't work on latest Chromium.
Failed to eliminate CSP policy 'worker-src: none' restriction.
This doesn't work in Chrome 87. It may have at somepoint in the past, but not now :-(
Solves the problem. It won’t automatically activate which is a plus on security.
Saved my life, great for development testing.
Doesn't work. I tried this on JIRA Tempo TImesheets and didn't work. CSP from app.tempo.io as still blocked.
Don't know if it's just me, but it seems it stopped working recently... It was working perfectly before.
I would like that whitelisting would be enabled! (I only want this for single domain) UPDATE: it stopped working for me in late 2020 :(