Item logo image for CORS Unblocker by HomieLab

CORS Unblocker by HomieLab

ExtensionDeveloper Tools6 users
Item media 4 (screenshot) for CORS Unblocker by HomieLab
Item media 1 (screenshot) for CORS Unblocker by HomieLab
Item media 2 (screenshot) for CORS Unblocker by HomieLab
Item media 3 (screenshot) for CORS Unblocker by HomieLab
Item media 4 (screenshot) for CORS Unblocker by HomieLab
Item media 1 (screenshot) for CORS Unblocker by HomieLab
Item media 1 (screenshot) for CORS Unblocker by HomieLab
Item media 2 (screenshot) for CORS Unblocker by HomieLab
Item media 3 (screenshot) for CORS Unblocker by HomieLab
Item media 4 (screenshot) for CORS Unblocker by HomieLab

Overview

Fix CORS errors while you develop: one switch unblocks cross-origin requests for the site you are on, cookies included.

CORS Unblocker by HomieLab fixes "blocked by CORS policy" errors while you develop, test or debug a web app. Open it on your site, switch it on, reload: the cross-origin fetch and XMLHttpRequest calls that site makes go through. ONE SWITCH PER SITE There are no modes to pick and no lists to fill in. The popup shows the site you are on and one switch. It is off everywhere until you turn it on, and every other site keeps the browser's normal CORS rules. The toolbar badge shows ON wherever it is on, and one page lists every site so you can turn any of them off again. WORKS WITH COOKIES The browser refuses Access-Control-Allow-Origin: * for requests that send cookies. CORS Unblocker allows your site's exact origin instead, so logged-in API calls work too. FIXES EVERY COMMON CORS ERROR No 'Access-Control-Allow-Origin' header is present ... is not equal to the supplied origin Method PUT is not allowed by Access-Control-Allow-Methods Request header field authorization is not allowed ... must not be the wildcard '*' when the credentials mode is 'include' Private network access from a public page to localhost One switch for localhost covers every port your dev servers use, and if your app moves to another port the extension follows it. HOW IT WORKS Headers are rewritten by the browser's own declarativeNetRequest engine, only for requests made by the sites you switched on. No script is injected into any page, no proxy is involved, and page loads themselves are never touched. WHAT IT CANNOT DO It changes what the browser enforces, not what the server allows: the server still sees who is asking and still checks your login. A preflight that the server answers with an error status or a redirect cannot be fixed by any extension. PRIVACY No analytics, no telemetry, no network requests of its own. The list of sites you switched on is stored in your browser and never leaves it. Open source, MIT licensed. Like it? Support it on Ko-fi: https://ko-fi.com/homielab

Details

  • Version
    1.0.0
  • Updated
    October 12, 2026
  • Size
    16.84KiB
  • Languages
    English
  • Developer
    Website
    Email
    contact@homielab.com
  • Non-trader
    This developer has not identified itself as a trader. For consumers in the European Union, please note that consumer rights do not apply to contracts between you and this developer.

Privacy

Manage extensions and learn how they're being used in your organization
The developer has disclosed that it will not collect or use your data. To learn more, see the developer’s privacy policy.

This developer declares that your data is

  • Not being sold to third parties, outside of the approved use cases
  • Not being used or transferred for purposes that are unrelated to the item's core functionality
  • Not being used or transferred to determine creditworthiness or for lending purposes

Support

For help with questions, suggestions, or problems, please open this page on your desktop browser

Google apps