Moesif Origin & CORS Changer

This plugin allows you to send cross-domain requests directly from browser without receiving Cross Origin Errors.
You can override the Request Origin header with this plugin and also have Access-Control-Allow-Origin set to *.

Update: We received comments from Chromium team that the support for request preflight interception for CORB thus CORS is still to be finalized. At this point this extension should work for some scenarios but not all, we believe it is still most functional of all CORS extensions out there. We'll keep you updated.

You can override:
Request Headers: Origin
Response Headers: Access-Control-Allow-Origin, Access-Control-Allow-Methods, Access-Control-Allow-Headers, Access-Control-Allow-Credentials, Access-Control-Expose-Headers

Guide on CORS:
https://www.moesif.com/blog/technical/cors/Authoritative-Guide-to-CORS-Cross-Origin-Resource-Sharing-for-REST-APIs/

DISCLAIMER: This tool circumvents CORS security rules baked into every browser and is intended for testing your own website during development. Some production websites like Google Docs or Facebook may complain if they detect something that isn't expected. You can use the whitelist feature to only turn on for some domains. To avoid security issues, it is recommend to turn off after debugging.

About Moesif:

Moesif (https://www.moesif.com) enables API teams at UPS, Radar, Deloitte, and others to deeply understand customer API usage and ship better API products with user-centric API analytics and monitoring, which enables you to:
- Understand customer API usage with user behavior analytics.
- Debug issues quickly with high-cardinality API logs and metrics.
- Get alerted of problems that impact customers.
- Track API KPIs with custom dashboards.
- Trigger behavioral emails that keep customers informed.
- Detect and Block API threats and abuse including OWASP Top 10 API threats.