ForceCORS

Allows forcing Cross-Origin Resource Sharing headers on any desired URL; helpful when accessing remote services from a local host.

ForceCORS - Chrome Extension

ForceCORS is a Google Chrome extension that allows you to selectively apply Cross-Origin Resource Sharing (CORS) Headers to web server responses of your choice. It helps in developing web applications that make Ajax/XHR requests by providing a way to add headers without disabling XHR security. The extension requires specifying monitored domains and explicit definition of headers to be added.

Extension stats

By: cdeely
Users: 2,000+
Rating: 3.81
(16)
Version: 1.1 (Last updated: 2014-03-21)
Creation date: 2014-03-21
Risk impact: High risk impact
Risk likelihood:
Manifest version: 2
Permissions:
  • webRequest
  • webRequestBlocking
  • http://*/*
  • https://*/*
Size: 81.24K
URLs: Website

Other platforms

Not available on Android
Not available on Firefox
Not available on Edge
Want to check extension ranking and stats more quickly for other Chrome extensions? Install Chrome-Stats extension to view Chrome-Stats data as you browse the Chrome Web Store.

Extension summary

ForceCORS is a Google Chrome extension which allows you to selectively apply CORS Headers to any web server responses you choose. This is extremely helpful when developing a web application that makes Ajax/XHR requests.

The extension requires you to specify the domains that you wish to monitor and allows you to explicitly define the headers to be added. This is preferable to completely disabling XHR security in your browser, which is a big security hole.

Regarding Permissions In order to allow you to append headers to ANY arbitrary location, this extension requires access to intercept ANY web request. However, by default the extension does NOT monitor any web traffic. Only URLs you specifically whitelist will be read by the extension, and only headers that YOU specify will be appended.

Note: Headers added by this extension will not appear in the DevTools "Network" panel due to a known Chrome bug: https://code.google.com/p/chromium/issues/detail?id=258064

This extension is open source under the MIT License and can be found on GitHub: https://github.com/chrisdeely/ForceCORS

User reviews

Very useful extension, thanks! Own settings for specific url patterns are great, and all works fine.

This extension made my developer's life MUCH easier. The competing extensions worked OK on some points but failed at customizability (e.g. setting Access-Control-Allow-Origin to a non-default value).
by Frédéric Bonnet, 2016-10-25

Doesn't work. No instructions. No explanation. Entering items does nothing. Links to docs are broken. Don't know what to say. Tried it three times now.
by Joshua Foxworth, 2016-09-23
View all user reviews

Extension safety

Risk impact

ForceCORS requires some sensitive permissions that could impact your browser and data security. Exercise caution before installing.

Risk likelihood

ForceCORS may not be trust-worthy. Avoid installing if possible unless you really trust this publisher.

Upgrade to see risk analysis details

Similar extensions

Here are some Chrome extensions that are similar to ForceCORS: