Skip to content

Instantly share code, notes, and snippets.

@Juul

Juul/chrome_disable_cors.md

Last active February 6, 2023 08:38
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save Juul/dc654a453c7ba198540da1b6c15ce6c0 to your computer and use it in GitHub Desktop.
Save Juul/dc654a453c7ba198540da1b6c15ce6c0 to your computer and use it in GitHub Desktop.
Download ZIP
How to disable CORS on modern Chrome / Chromium
Raw
chrome_disable_cors.md

There are lots of wrong/incomplete instructions on how to completely disable CORS checks for Chrome/Chromium.

Here's what works for me as of February 2023:

mkdir -p /tmp/foo
chromium-browser --disable-web-security -disable-site-isolation-trials user-data-a-dir="/tmp/foo"

This should only be used by developers who know what they are doing. Logging into anything with a browser running with security disabled is a recipe for getting your credentials stolen or worse.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment