Safe CORS 作者： Cemal Koc

Safe CORS lets developers bypass CORS restrictions on a per-tab basis, controlled entirely from page scripts.
Unlike traditional CORS extensions that use a toolbar toggle to disable CORS globally, Safe CORS is activated programmatically from your own code — making it ideal for local development and testing.
HOW TO USE
Open your browser console (F12) and run:
// Enable CORS bypass for this tab
document.dispatchEvent(new CustomEvent('CORS_DISABLE_TOGGLE', { detail: { enabled: true } }))
// Disable CORS bypass for this tab
document.dispatchEvent(new CustomEvent('CORS_DISABLE_TOGGLE', { detail: { enabled: false } }))
Or add a helper to your development page:
function setCors(enabled) {
document.dispatchEvent(new CustomEvent('CORS_DISABLE_TOGGLE', { detail: { enabled } }))
}
if (location.hostname === 'localhost') {
setCors(true)
}
WHY "SAFE"?
• Per-tab only — other tabs are unaffected
• Session-only — close the tab or restart the browser and it's gone
• Page-initiated — no accidental global CORS bypass
• No data collection — the extension collects nothing