Juul/chrome_disable_cors.md

Last active February 6, 2023 08:38

Star () You must be signed in to star a gist
Fork () You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/Juul/dc654a453c7ba198540da1b6c15ce6c0.js"></script>
Save Juul/dc654a453c7ba198540da1b6c15ce6c0 to your computer and use it in GitHub Desktop.

Download ZIP

How to disable CORS on modern Chrome / Chromium

Raw

chrome_disable_cors.md

There are lots of wrong/incomplete instructions on how to completely disable CORS checks for Chrome/Chromium.

Here's what works for me as of February 2023:

mkdir -p /tmp/foo
chromium-browser --disable-web-security -disable-site-isolation-trials user-data-a-dir="/tmp/foo"

This should only be used by developers who know what they are doing. Logging into anything with a browser running with security disabled is a recipe for getting your credentials stolen or worse.