CORS Tester

Use this little website to test if a URL is setup correctly to work with CORS.




If your CORS setup is not using a wildcard then this should be a domain that matches your AllowedOrigins


Shareable link:

Results

This URL will only work for specific domains.

What's that mean?

This url can only be loaded by pages that match https://cors-test.codehappy.dev/. If you're trying to load it from a different origin and it's not working, you'll need to change it so the access-control-allow-origin header is set to *.

Headers

These are the response headers received when making the request.

access-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-origin: https://cors-test.codehappy.dev/
access-control-allow-private-network: true
access-control-request-private-network: true
cache-control: max-age=1, private, must-revalidate
cf-cache-status: DYNAMIC
cf-ray: 8e3aa3bdd1f41409-ORD
connection: keep-alive
content-type: text/html; charset=UTF-8
date: Sat, 16 Nov 2024 21:40:30 GMT
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
server: cloudflare
transfer-encoding: chunked
vary: Accept-Encoding

CORS tester was built by @mscccc. The code is available on GitHub. Sponsored by HTML/CSS to Image.