CORS Tester
CORS tests send requests directly to your target
Why: The browser sends the configured request so you can inspect the response and browser CORS behavior.
Data sent:
- Target URL, configured headers and credentials, and the request payload
- Browser-controlled Origin and preflight headers; same-origin cookies permitted by browser defaults
Data handling: The target may receive a preflight or actual request even when browser CORS rules prevent this page from reading a response. This test does not use the app server proxy.
Audit the source: src/app/tools/cors-tester/page.tsx
Request
GET
Custom headers (one per line, key: value)
Request origin:
this originSend a request to see the CORS verdict.