CORS Unblock

No more CORS error by appending 'Access-Control-Allow-Origin: *' header to local and remote web requests when enabled
What is CORS Unblock?
"CORS Unblock" is a Firefox extension offering control over XMLHttpRequest and fetch methods. It appends custom 'access-control-allow-origin' and 'access-control-allow-methods' headers to every browser request, resolving CORS (Cross Origin Resource Sharing) errors. Its features include toggling on/off from the toolbar, customizing allowed methods, and options to not overwrite server-filled headers. Supports WEBDAV methods.

Add-on stats

By: Balvin
Rating: 3.86 (28)
Version: 0.3.8 (Last updated: 2024-02-11)
Creation date: 2019-01-22
Weekly download count: 369
Firefox on Android: No
Risk impact: High risk impact
Risk likelihood: Low risk likelihood
Manifest version: 2
Permissions:
  • storage
  • <all_urls>
  • webRequest
  • webRequestBlocking
  • declarativeNetRequest
  • contextMenus
Size: 211.30K
URLs: Website

Other platforms

CORS Unblock (v0.3.8)
4.15 (158) 200,000
CORS Unblock (v0.3.8)
4.30 (12) 54,842
Want to check extension ranking and stats more quickly for other Firefox add-ons? Install Chrome-Stats extension to view Chrome-Stats data as you browse the Firefox Browser Add-ons.

Add-on summary

This extension provides control over XMLHttpRequest and fetch methods by providing custom "access-control-allow-origin" and "access-control-allow-methods" headers to every requests that the browser receives. A user can toggle the extension on and off from the toolbar button. To modify how these headers are altered, use the right-click context menu items. You can customize what method are allowed. The default option is to allow 'GET', 'PUT', 'POST', 'DELETE', 'HEAD', 'OPTIONS', 'PATCH' methods. You can also ask the extension not to overwrite these headers when the server already fills them.

Preview: https://www.youtube.com/watch?v=8berLeTjKDM

Default values: Access-Control-Allow-Origin: request initiator or '' Access-Control-Allow-Methods: 'GET, PUT, POST, DELETE, HEAD, OPTIONS, PATCH, PROPFIND, PROPPATCH, MKCOL, COPY, MOVE, LOCK' Access-Control-Allow-Methods: request initiator or '' Access-Control-Allow-Credentials: 'true' Access-Control-Expose-Headers: request initiator or '*'

To report bugs please use: https://github.com/balvin-perrie/Access-Control-Allow-Origin---Unblock

Change Log:

See more

User reviews

These summaries are automatically generated weekly using AI based on recent user reviews. Firefox Browser Add-ons does not verify user reviews, so some user reviews may be inaccurate, spammy, or outdated.
Pros
  • Works as expected when enabled.
  • Useful for modifying headers, including 'Access-Control-Expose-Headers'.
  • Helps frontend developers by providing necessary functionality.
Cons
  • Does not work on multiple Firefox versions, particularly older ones.
  • Some sites malfunction when the extension is enabled.
  • Lacks a whitelisting option for specific sites.
Most mentioned
  • Does not work
  • Works well
  • Whitelisting option requested
Recent reviews
Does what it says on the tin, would be nice though to have the ability to whitelist sites, like just localhost, instead of all domains.
by Zach Bellay, 2024-11-05

Great that you can modify "Access-Control-Expose-Headers", too! Very useful.
by tvogel, 2024-06-20
View all user reviews

Add-on safety

Risk impact

CORS Unblock requires some sensitive permissions that could impact your browser and data security. Exercise caution before installing.

Risk likelihood

CORS Unblock has earned a fairly good reputation and likely can be trusted.

Upgrade to see risk analysis details