CORS Checker
Check whether a URL can be read from this browser origin and inspect visible CORS headers.
CORS Checker
Browsers do not let a page spoof the real Origin header. This tool sends a normal browser request and an OPTIONS-style preflight probe where possible, then explains what the browser allows this page to see.
Result
History tool ini
Data terakhir yang pernah kamu isi di tool ini, tersimpan hanya di device/browser ini.
Save what you type here, in this browser? Your work would go into this browser's local storage, so a refresh or a trip to another tool does not wipe it. You also get a short list of previous entries under the form, each one restorable with a click. Nothing is ever uploaded, and there is no account.
Being straight about the trade-off: anything kept there can be read by anyone who can use this browser profile, and by any script that later runs on this site. A tool page can hold a private key, a password or a signed token. Saving is convenient; it is not private.
About this tool
Check whether a URL can be read by JavaScript from this site origin. The tool sends a browser fetch request and, where possible, an OPTIONS-style probe, then reports what the browser allowed the page to see. It cannot spoof arbitrary Origin headers because browsers deliberately do not allow that.
Questions
- Why does it say blocked without showing the server headers?
- When CORS blocks a response, the browser hides the response from JavaScript. That is the rule this tool is testing, so sometimes the only honest answer is that the page could not read the details.