Allow CORS: Access-Control-Allow-Origin
工具 / Tools
Easily add (Access-Control-Allow-Origin: *) rule to the response header.
用户数
800K
评分
3.4
评论数
294
7 天增长
0|0%
稳定信号未识别到付费功能高风险权限组合
CORS Unblock
No more CORS error by appending 'Access-Control-Allow-Origin: *' header to local and remote web requests when enabled
用户数200K当前公开安装规模
评分4.1商店平均评分
评论数175公开评论体量
Manifest 版本V3插件平台版本
7日增长0近 7 天净增用户
7日增长率0%相对周增长速度
视觉预览
4 项素材CORS Unblock 媒体预览
趋势
用户增长趋势
按已采集快照查看用户数变化。
用户增长趋势
评分趋势
近 7 日评分趋势
展示最近 7 日窗口内已采集的评分快照，辅助判断近期评分是否稳定。
7 日评分变化
起始值
4.08
最新值
4.08
7 日评分变化
0.00
2026年7月14日2026年7月20日
增长概览
日/周/月增长表现
同口径展示 1 天、7 天、30 天的绝对增长与增长率。
1日增长持平
00%7日增长持平
00%30日增长持平
00%技术摘要
版本、语言与抓取信息
查看发布时间、版本、支持语言、最近更新和抓取时间。
版本0.5.2
ManifestV3
大小198KiB
语言数1English
发布时间
最近更新
最近抓取
English
简介
插件简介
查看插件说明、主要功能和适用场景。
This extension bypasses the "XMLHttpRequest" and "fetch" rejections by altering the "Access-Control-Allow-Origin" and "Access-Control-Allow-Methods" headers for every request that the browser receives. You can activate the extension by pressing the action button. Also, use the right-click context menu over the action button to modify which headers the extension manipulates. You can also ask the extension not to overwrite these headers when the server returns values for them.
The default values for the headers:
Access-Control-Allow-Origin: request initiator or empty
Access-Control-Allow-Methods": GET, PUT, POST, DELETE, HEAD, OPTIONS, PATCH, PROPFIND, PROPPATCH, MKCOL, COPY, MOVE, LOCK
Access-Control-Allow-Methods: request initiator or empty
Access-Control-Allow-Credentials: true
评价
最新评论快照
查看最近评论和评分分布。
商店综合星级4.1Chrome 商店给出的聚合评分，包含只有打分但没有同步评论正文的情况
已同步评论均分4.0仅基于下方已同步评论正文计算
有内容评论131已同步的评论正文数量
总评分/评论数175Chrome 商店公开评分/评论计数
商店综合星级：4.1。下方星级分布只统计已同步评论正文；如果某个插件只有公开分数、没有真实评论正文，这里可能为空。
相关推荐
同类与相关插件
查看 Chrome 商店详情页中的相关产品。
CSP Unblock
开发者工具 / Developer Tools
No more Content-Security-Policy limitations. This extension removes all CSP-related headers during website testing.
用户数
7K
评分
4.0
评论数
7
7 天增长
0|0%
Cross Domain - CORS
开发者工具 / Developer Tools
Cross Domain will help you to deal with cross domain - CORS problem. This is tool helpful when face with cross domain issue.
用户数
40K
评分
3.8
评论数
77
7 天增长
0|0%
Moesif Origin/CORS Changer & API Logger
开发者工具 / Developer Tools
疑似付费置信度 92平台 Stripe
Allow cross-domain requests by override Origin and CORS headers. Log/capture XmlHttpRequest API calls for debugging and analytics.
用户数
100K
评分
3.8
评论数
196
7 天增长
0|0%
Angular DevTools
开发者工具 / Developer Tools
Angular DevTools extends Chrome DevTools adding Angular specific debugging and profiling capabilities.
用户数
400K
评分
3.7
评论数
190
7 天增长
0|0%
Disable Content-Security-Policy
开发者工具 / Developer Tools
Disable Content-Security-Policy for web application testing. When the icon is coloured, CSP headers are disabled.
用户数
60K
评分
3.5
评论数
102
7 天增长
0|0%
Doesn't seem to work for iframes from different domains (codepen.io cdpn.io)
Fixes an issue with reddit videos not playing. Breaks functionality practically anywhere else. I have mixed feelings about what seems to be a requirement to now actively manage functionality of a browser and/or website that should function well enough on its own, but it is what it is, and that's not the fault of the developer of this extension.
Show perfeito
Breaks drive.google.com for me if enabled for all sites.
Works very well and very well thought, by default it's disabled for security reasons but it can be enabled on a site-by-site basis by just clicking the icon, perfect for local javascript development! Also worth mentioning the plugin is opensource and also available on Firefox and Microsoft Edge in addition to Google Chrome. Kudos to the developers for such an easy and well working plugin!
Brabo
Add whitelist site, sites where extension will dont work
Didn't work. Simple as that.
This does not work for local html & local file. Sample html is below: --- <html> <body> <script type="text/javascript" src="https://mozilla.github.io/pdf.js/build/pdf.js"></script> <script type="text/javascript" src="https://mozilla.github.io/pdf.js/build/pdf.worker.js"></script> <script type="text/javascript"> var url = "file:///Users/amagaiwork/Desktop/sample.pdf"; var pages = [], heights = [], width = 0, height = 0, currentPage = 1; var scale = 1.5; function draw() { var canvas = document.createElement('canvas'), ctx = canvas.getContext('2d'); canvas.width = width; canvas.height = height; for(var i = 0; i < pages.length; i++) ctx.putImageData(pages[i], 0, heights[i]); document.body.appendChild(canvas); } pdfjsLib.disableWorker = true; // due to CORS const loadingTask = pdfjsLib.getDocument(url); loadingTask.promise.then(function (pdf) { getPage(); function getPage() { pdf.getPage(currentPage).then(function(page) { console.log("Printing " + currentPage); var viewport = page.getViewport(scale); var canvas = document.createElement('canvas') , ctx = canvas.getContext('2d'); var renderContext = { canvasContext: ctx, viewport: viewport }; canvas.height = viewport.height; canvas.width = viewport.width; page.render(renderContext).then(function() { pages.push(ctx.getImageData(0, 0, canvas.width, canvas.height)); heights.push(height); height += canvas.height; if (width < canvas.width) width = canvas.width; if (currentPage < pdf.numPages) { currentPage++; getPage(); } else { draw(); } }); }); } }); </script> </body> </html>
Works great!