CORS Analyzer

// origin · preflight · credentials · Access-Control-* headers

Scenarios

The request the browser makes

Page origin

Method

Request headers the page sets

Sends cookies or HTTP auth (credentials: 'include')

Paste the headers from the preflight (OPTIONS) response, the actual response, or both. Other headers are ignored.