Compare: CORS Unblock vs CSP Unblock

Side-by-side store, rating, release, and description data.

Upgrade to compare more stats and unlock extended historical analytics.

Metric	CORS Unblock	CSP Unblock
User count	200,000	7,000
Average rating	4.08	4.50
Rating count	175	6
Last updated	2025-06-03	2026-01-05
Size	0.20 MB	0.11 MB
Version	0.5.2	0.1.3

Short description	CORS Unblock Chrome extension bypasses CORS errors by appending 'Access-Control-Allow-Origin: *' headers to web requests. Activate with one click!	CSP Unblock temporarily removes Content-Security-Policy headers to test inline and remote scripts, and cross-origin resources. Disable while browsing.
Full summary	CORS Unblock is a powerful Chrome extension designed to bypass the common Cross-Origin Resource Sharing (CORS) errors encountered during web development. By appending and modifying headers such as 'Access-Control-Allow-Origin' and 'Access-Control-Allow-Methods', it enables smooth communication between local and remote web requests. Users can activate it easily with a single click and customize which headers to manipulate via the right-click context menu. Beyond basic header modification, the extension offers advanced features: removing Content Security Policy headers to avoid content restrictions, allowing cross-origin frame embedding by removing 'X-Frame-Options', overriding 4xx server responses to simulate support for unsupported methods, and controlling sensitive headers like 'referer' and 'origin' to ensure compatibility with strict servers. It also optionally fixes CORS on redirected URLs and supports SharedArrayBuffer class emulation. This extension is an essential tool for developers tackling cross-origin restrictions effectively.	CSP Unblock removes specific CSP-related response headers to remove limitations on testing. It targets headers: content-security-policy, content-security-policy-report-only, x-webkit-csp and x-content-security-policy and the reporting APIs report-to and reporting-endpoints. This enables testing inline and remote scripts, loading cross-origin resources, and remote worker scripts or media. Notes: Disable the extension when browsing; removal applies to the top-frame and all sub-frames; use for development and testing only as CSP protections are reduced during use.