CORS Tester

Use this little website to test if a URL is setup correctly to work with CORS.




If your CORS setup is not using a wildcard then this should be a domain that matches your AllowedOrigins


Shareable link:

Results

This URL will work correctly with CORS.

Headers

These are the response headers received when making the request.

accept-ranges: bytes
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 3600
cf-cache-status: DYNAMIC
cf-ray: 990296083447f80a-YYZ
connection: keep-alive
content-length: 69
content-type: binary/octet-stream
date: Fri, 17 Oct 2025 20:36:05 GMT
etag: "00c8ec455e57747cd4f3f7f69ae94c66"
last-modified: Fri, 17 Oct 2025 20:35:23 GMT
server: cloudflare
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-id-2: KxmS7b4bgtZI0FTj/aXumj4tGQuPZfsXs9aGfPbuX/oiXXLDxntZ7JZIgpV3oOvhXlu6BNvSFWLW4MvNkf6HYbXxKWdKviW7MyMM7pNa8tQ=
x-amz-replication-status: COMPLETED
x-amz-request-id: 8X9TGQGM3A2BMHYE
x-amz-server-side-encryption: AES256
x-amz-storage-class: INTELLIGENT_TIERING
x-amz-version-id: TyzxDBUNMHa2CovBPhbptzOn2fjPZKwx

CORS tester was built by @mscccc. The code is available on GitHub. Sponsored by HTML/CSS to Image.