Cross Domain - CORS

Good extension, but please, make it disabled by default. Whenever I reopen Chrome, extensions turns on, which makes browsing Internet unsafe (because, well, that's what this extension about).

It's disabled by default, but when you click the big green enable button, it works like a dream.

Lacks documentation and examples. When it doesn't work you have no way of knowing why. There's no easy way to tell if your URL patterns configured are working. It's not clear what types of CORS it's allowing or denying. It's not clear if regex in URL patterns works or what regex will work and what won't.

I've had the extension for years without any incident until May 28, 2024. When this extension is turned on it's broken the account login page for: The Globe and Mail, Twitter, The Athletic, The Atlantic, American Express, The New York Times and has made it so videos on YouTube never load. This is extension is effectively broken now

Virtual JameDeveloperMay 30, 2024

Thank you for your feedback. Google has updated their API and no longer allows blacklisting using regex patterns. As a workaround, please change the setting to "Disable" and save it when it's not needed. I will work on fixing this issue. In the meantime, if you encounter any sites affected by this extension, please report them here: https://devratroom.blogspot.com/p/cross-domain-cors-extension.html. I will add them to the blacklist. --- Update: Version 0.3.2 should now resolve the issue. Please provide feedback if you encounter any further problems: https://devratroom.blogspot.com/p/cross-domain-cors-extension.html

• Report illegal content
• Copy link

Version 0.3.0 updated on 28-May-24 is broken. I have used the extension for many years with the default wildcard rule deleted and only a single local IP address rule but as of today's version many sites such as youtube do not now work at all when the extension is loaded. Edit 01-Jun-24: New version 0.3.2 fixes Youtube but other sites (e.g. Feedly) are still broken. I have been using another CORS extension which works fine everywhere.

Virtual JameDeveloperMay 30, 2024

Thank you for your feedback. Google has updated their API and no longer allows blacklisting using regex patterns. As a workaround, please change the setting to "Disable" and save it when it's not needed. I will work on fixing this issue. In the meantime, if you encounter any sites affected by this extension, please report them here: https://devratroom.blogspot.com/p/cross-domain-cors-extension.html. I will add them to the blacklist. --- Update: Version 0.3.2 should now resolve the issue. Please provide feedback if you encounter any further problems: https://devratroom.blogspot.com/p/cross-domain-cors-extension.html.

• Report illegal content
• Copy link

This extension blocks my ability to use Google Maps satellite view. I have removed the extension tested, reinstalled the extension and tested again. This extension is the only variable to Google Maps not working. May not be an issue for you, just wanted to let others know if you're experiencing issues.

Virtual JameDeveloperFeb 18, 2024

There is a button to enable/disable the function of extension. I am updating a new function to allow blacklist site that not enable CORS, that will help preventing attempts to enable CORS on non-compliant websites. --- Update: Version 0.3.2 should now resolve the issue. Please provide feedback if you encounter any further problems: https://devratroom.blogspot.com/p/cross-domain-cors-extension.html.

• Report illegal content
• Copy link

thank you!!! I was going crazy trying to build react project, finally im able to fetch everything! many thanks!!!

This extension causes server errors when working in Google Drive or Google Docs.

Great Extension, Please Convert it minifest v3

Couldn't connect to a REST API that a program sets up and also don't have any way to modify the headers on the server side. Only other thing that worked was opening Chrome with web security turned off however this was a much more convenient solution.