Is Allow CORS: Access-Control-Allow-Origin safe?
Allow CORS injects Access-Control-Allow-Origin headers into all HTTP responses, disabling the browser's Same-Origin Policy while active.
When switched on, the extension uses declarativeNetRequest session rules to add an Access-Control-Allow-Origin: * header to every HTTP response, allowing any web page to read cross-origin responses that the browser would otherwise block. An optional per-tab mode captures the actual requesting origin and injects a matching specific-origin header instead, which also permits credentialed cross-origin requests when the credentials option is enabled. This affects all URLs and all resource types until the extension is turned off.
Who publishes itMuyor - 17 other listings from the same operator, none carrying a finding
Muyor - 17 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
17 other listings published from this account, 372k+ users between them, none of them carrying a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 0.2.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
<all_urls>
Store data in your browser
storage
Watch every request your browser makes
webRequest
Block and redirect the requests your browser makes
declarativeNetRequest