CORS Everywhere EN
spenibus · Firefox
A firefox addon allowing the user to enable CORS everywhere by altering http responses. Report issues to the repository, with enough information to reproduce the problem: https://github.com/spenibus/cors-everywhere-firefox-addon/issues
<all_urls>），意味着它可以读取你在任意站点的页面内容，包括已登录的页面。这是许多扩展正常工作的必要条件，但也值得你确认来源可信。
截图
简介
This is a firefox addon that allows the user to enable CORS everywhere by altering http responses.
Note
- It is important to understand that this addon does not actually disable any kind of security within Firefox.
It merely alters http requests to make the browser believe the server has answered favorably.
This means the http requests have to be valid and follow the CORS rules. - This addon is now a WebExtension.
- Android is untested therefore not officially supported.
Android platform support #15 - In Firefox 74.0, the addon can not operate on local files (using the file:/// protocol). This is apparently fixed in 75.0.
Firefox 74.0 #32
Usage
The addon's functionality can be toggled with the included button and is disabled by default. The button can be found by right-clicking a toolbar and choosing customize. It is labelled CorsE and has 3 states:
- red, addon is disabled, CORS rules are upheld.
- green, addon is enabled, CORS rules are bypassed.
- green/red, addon is enabled and using the activation whitelist, CORS rules are bypassed when the origin url matches a filter in the whitelist.
A basic CORS test is available in the repository at ./_test/cors-everywhere-test.html.
Intended for developers. Use at your own risk.
Options
Available in about:addons.
- Enabled at startup Enables this addon on startup.
- Force value of "access-control-allow-origin" Self explanatory.
- Activation whitelist When the addon is enabled, this will check the origin url against the whitelist to decide if headers will be modified. Uses regular expressions.
FAQ
The addon is enabled but the requests return content as if no user was logged in the target domain. Try using withCredentials.
CORS Everywhere 是做什么的
CORS Everywhere 是一款面向 Firefox 的开发者工具类扩展，主要用来调试页面、查看样式与请求、测试接口、辅助前端开发。官方对它的介绍是：A firefox addon allowing the user to enable CORS everywhere by altering http responses. Report issues to the repository, with enough information to reproduce the problem: https://github.com/spenibus/cors-everywhere-firefox-addon/issues在Firefox 附加组件商店（AMO）上，它当前版本 18.11.13.2044resigned1，评分 4.15（122 人评价），约 21,548 名用户。
适合什么人用
从功能定位看，CORS Everywhere 更适合前端工程师、测试与需要经常查看页面结构的用户。如果你平时只是偶尔遇到相关需求，用浏览器自带功能也能凑合；但如果这件事每天都发生，装一个专门处理它的扩展通常比手动操作省事得多。需要注意的是它作用于所有网站，装上后建议先观察一两天，确认不影响常用站点的正常使用。
怎么安装 CORS Everywhere
- 打开Firefox 附加组件商店（AMO）上的官方页面；
- 点「添加到浏览器」并确认权限提示；
- 装好后在扩展列表里固定图标，方便随时开关。
本站只做索引与介绍，安装包来自官方商店。如果商店页面提示当前地区不可用，说明该扩展未在你所在区域上架。
常见问题
CORS Everywhere 是免费的吗？
CORS Everywhere 在Firefox 附加组件商店（AMO）免费提供下载。它是浏览器扩展，装上就能直接用，不需要注册账号。
CORS Everywhere 安全吗？
它只申请了 0 项权限，范围比较克制，没有申请「读取所有网站数据」这种大权限。
CORS Everywhere 支持哪些浏览器？
当前收录的版本来自Firefox 附加组件商店（AMO），适用于 Firefox。同一个扩展在其他商店可能有对应版本，但功能与版本号不一定相同。
怎么卸载 CORS Everywhere？
在扩展管理页找到 CORS Everywhere，点移除即可。它在本地保存的设置会一起清掉，不会残留数据。
权限清单 来自 manifest.json 原文
站点访问 1
<all_urls>
接口权限 3
storagewebRequestwebRequestBlocking