# Cross-Origin Resource

> Inspect the current page for cross-origin resources and potential CORS/referrer/mixed-content issues. Client-side, read-only scan.

Canonical page: [https://chrome-stats.com/d/cross-origin-resource](https://chrome-stats.com/d/cross-origin-resource)

## Overview

- **ID:** `cross-origin-resource`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** cross-origin-resource-check
- **Category:** other
- **Daily users:** 3
- **Version:** 1.0.0
- **Last updated:** 2025-08-27
- **First published:** 2025-08-24
- **Size:** 16 KB
- **Data as of:** 2026-09-09
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/cross-origin-resource/)
- **Website:** [https://xoilac.sa.com/](https://xoilac.sa.com/)

## Description

This lightweight Firefox extension scans the current page and highlights potential cross-origin and security-related issues. It is entirely client-side and read-only—no data is sent anywhere.

## Rankings

- #53,905 — Overall
- #32 — resource
- #85 — source code
- #209 — source

## Permissions and access

### Permissions

- `activeTab`
- `tabs`
- `contextMenus`
- `storage`
- `<all_urls>`

### Content script matches

- `<all_urls>`

## Safety

- **Risk impact:** High risk impact
- **Risk likelihood:** Moderate risk likelihood

### Analysis details

- Grants access to browser tabs, which can be used to track user browsing habits and history, presenting a privacy concern.
- This extension has low user count. Unpopular extensions may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [Cross-Origin Resource Check](https://chrome-stats.com/d/cross-origin-resource-check) — 1 users
- [XSS Finder ext](https://chrome-stats.com/d/xss-finder-ext) — 3 users
- [SurfSafe](https://chrome-stats.com/d/surfsafe) — 1 users
- [CSRF Request Checker](https://chrome-stats.com/d/csrf-request-checker)
- [Subresource Integrity](https://chrome-stats.com/d/subresource-integrity) — 2 users
- [JS Recon Buddy](https://chrome-stats.com/d/js-recon-buddy) — 161 users, 5.00 / 5
- [CORS Policy Header Viewer](https://chrome-stats.com/d/cors-policy-header-viewer) — 1 users
- [CORS Everywhere](https://chrome-stats.com/d/cors-everywhere) — 20,852 users, 4.13 / 5
- [Secret Scanner](https://chrome-stats.com/d/secret-scanner) — 2 users
- [InfraLens - Security & Inspector](https://chrome-stats.com/d/infralens-security-inspector) — 1 users
- [XSS Detector](https://chrome-stats.com/d/xss-detector) — 2 users
- [cors-plugin](https://chrome-stats.com/d/cors-plugin) — 129 users, 3.75 / 5

---

Source: [Chrome-Stats](https://chrome-stats.com/d/cross-origin-resource)