Is Cross Domain - CORS safe?
Cross Domain - CORS rewrites response headers so non-credentialed cross-origin reads are broadly allowed.
When its CORS bypass is enabled, Cross Domain - CORS modifies response headers for matching network responses across all URLs except YouTube and Googlevideo. It sets permissive Access-Control headers, including a wildcard origin and exposed headers, which allows web pages to read non-credentialed cross-origin responses that browsers would normally block.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 0.2.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
<all_urls>
Act on the current tab, but only after you click the extension
activeTab
Store data in your browser
storage
Watch every request your browser makes
webRequest
Watch, block and rewrite every request your browser makes
webRequestBlocking