CORS Tester

Use this little website to test if a URL is setup correctly to work with CORS.




If your CORS setup is not using a wildcard then this should be a domain that matches your AllowedOrigins


Shareable link:

Results

This URL will work correctly with CORS.

Headers

These are the response headers received when making the request.

access-control-allow-origin: *
access-control-expose-headers: content-length
cache-control: public, max-age=2592000
cf-cache-status: EXPIRED
cf-ray: 95a45edd066e617b-ORD
connection: keep-alive
content-length: 223
content-type: application/xml
date: Sat, 05 Jul 2025 05:12:59 GMT
expires: Mon, 04 Aug 2025 05:12:59 GMT
server: cloudflare
set-cookie: __cf_bm=YyZO1CaJ7oZhY8CCGjvefya9H4lU3xRudHPfWeS1Pkw-1751692379-1.0.1.1-2H4rZkjnx.yAG6EJrsV5Zr9SW1aFR8mq7cpiNuShdEk4gRy7mGAtqUl0Ji7GcGrNu3Ac2GL5LPCA2Ux1El2BuCt8VRDwSWR5SjmNHK66XF8; path=/; expires=Sat, 05-Jul-25 05:42:59 GMT; domain=.oaistatic.com; HttpOnly; Secure, _cfuvid=LTspcWwn0aXLiCNTBEb2FEWBZp2AiMlLy._UJtg9UKk-1751692379758-0.0.1.1-604800000; path=/; domain=.oaistatic.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-ms-request-id: 8ed515a0-201e-0022-136b-ed9317000000

CORS tester was built by @mscccc. The code is available on GitHub. Sponsored by HTML/CSS to Image.