Is Allow CORS safe?
Allow CORS rewrites CORS response headers for all pages to match the active tab origin when enabled.
When the extension is turned on, it reads the active tab's origin and installs a browser network rule that changes CORS response headers for XMLHttpRequest, main-frame, and sub-frame requests. The rule sets Access-Control-Allow-Origin to the active tab origin, sets allowed methods from the user's popup choices, and sets Access-Control-Allow-Headers to '*'.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
<all_urls>
Store data in your browser
storage
Block and redirect the requests your browser makes
declarativeNetRequest
Show you desktop notifications
notifications