CORS Tester

Use this little website to test if a URL is setup correctly to work with CORS.




If your CORS setup is not using a wildcard then this should be a domain that matches your AllowedOrigins


Shareable link:

Results

This URL will work correctly with CORS.

Headers

These are the response headers received when making the request.

access-control-allow-origin: *
access-control-expose-headers: content-length
cache-control: public, max-age=2592000
cf-cache-status: EXPIRED
cf-ray: 92a6e170423fe1cf-ORD
connection: keep-alive
content-length: 223
content-type: application/xml
date: Thu, 03 Apr 2025 07:33:56 GMT
expires: Sat, 03 May 2025 07:33:56 GMT
server: cloudflare
set-cookie: __cf_bm=B2jDcs2L.TxlqTOeEu3SF43ZWCccn7lfK5gu29b2MDM-1743665636-1.0.1.1-dCWKtir0yGyMSlbX._82UNP4kGzxCGBG01fmpqK4fGNaQn33hwLTMsLu_gdP91EUd7ujcfXJ8av5Ig78KlpL8pjEW7vrq65DtjG_.EfRMbY; path=/; expires=Thu, 03-Apr-25 08:03:56 GMT; domain=.oaistatic.com; HttpOnly; Secure, _cfuvid=xRDfxxZotTJSCQsQfJAlX2Hz.TZuEDbCSIJu8vKAs4Y-1743665636215-0.0.1.1-604800000; path=/; domain=.oaistatic.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-ms-request-id: d0fc5ebf-301e-004a-346a-a4b8c5000000

CORS tester was built by @mscccc. The code is available on GitHub. Sponsored by HTML/CSS to Image.