Safe CORS by Cemal Koc
Per-tab CORS bypass controlled from your page scripts. No toolbar button, no popup — just dispatch a CustomEvent from your code to enable or disable CORS for the current tab. Session-only, nothing is persisted.
Extension Metadata
About this extension
Safe CORS lets developers bypass CORS restrictions on a per-tab basis, controlled entirely from page scripts.
Unlike traditional CORS extensions that use a toolbar toggle to disable CORS globally, Safe CORS is activated programmatically from your own code — making it ideal for local development and testing.
HOW TO USE
Open your browser console (F12) and run:
// Enable CORS bypass for this tab
document.dispatchEvent(new CustomEvent('CORS_DISABLE_TOGGLE', { detail: { enabled: true } }))
// Disable CORS bypass for this tab
document.dispatchEvent(new CustomEvent('CORS_DISABLE_TOGGLE', { detail: { enabled: false } }))
Or add a helper to your development page:
function setCors(enabled) {
document.dispatchEvent(new CustomEvent('CORS_DISABLE_TOGGLE', { detail: { enabled } }))
}
if (location.hostname === 'localhost') {
setCors(true)
}
WHY "SAFE"?
• Per-tab only — other tabs are unaffected
• Session-only — close the tab or restart the browser and it's gone
• Page-initiated — no accidental global CORS bypass
• No data collection — the extension collects nothing
Unlike traditional CORS extensions that use a toolbar toggle to disable CORS globally, Safe CORS is activated programmatically from your own code — making it ideal for local development and testing.
HOW TO USE
Open your browser console (F12) and run:
// Enable CORS bypass for this tab
document.dispatchEvent(new CustomEvent('CORS_DISABLE_TOGGLE', { detail: { enabled: true } }))
// Disable CORS bypass for this tab
document.dispatchEvent(new CustomEvent('CORS_DISABLE_TOGGLE', { detail: { enabled: false } }))
Or add a helper to your development page:
function setCors(enabled) {
document.dispatchEvent(new CustomEvent('CORS_DISABLE_TOGGLE', { detail: { enabled } }))
}
if (location.hostname === 'localhost') {
setCors(true)
}
WHY "SAFE"?
• Per-tab only — other tabs are unaffected
• Session-only — close the tab or restart the browser and it's gone
• Page-initiated — no accidental global CORS bypass
• No data collection — the extension collects nothing
Rated 0 by 0 reviewers
Permissions and data
Required permissions:
- Access browser tabs
- Access your data for all websites
Data collection:
- The developer says this extension doesn't require data collection.
More information
- Add-on Links
- Version
- 1.0.0
- Size
- 28.18 KB
- Last updated
- 5 days ago (Mar 14, 2026)
- Related Categories
- License
- MIT License
- Version History
- Add to collection