CORS Tester

Use this little website to test if a URL is setup correctly to work with CORS.




If your CORS setup is not using a wildcard then this should be a domain that matches your AllowedOrigins


Shareable link:

Results

This URL will only work for specific domains.

What's that mean?

This url can only be loaded by pages that match https://jumble.social. If you're trying to load it from a different origin and it's not working, you'll need to change it so the access-control-allow-origin header is set to *.

Headers

These are the response headers received when making the request.

access-control-allow-origin: https://jumble.social
alt-svc: h3=":443"; ma=2592000
cf-cache-status: DYNAMIC
cf-ray: 937dfd96f192819a-IAD
connection: keep-alive
content-length: 386
content-type: application/json; charset=utf-8
date: Tue, 29 Apr 2025 10:07:07 GMT
onion-location: http://vm7h454g5hiy2nt3u5o7evtz3vigtypo2mkyausakvdkbmd7wpyhx5qd.onion/.well-known/lnurlp/anthony.accioly
server: cloudflare
vary: Origin
x-ratelimit-limit: 
x-ratelimit-remaining: 
x-ratelimit-reset:

CORS tester was built by @mscccc. The code is available on GitHub. Sponsored by HTML/CSS to Image.