The extension has a substantial user base of 200,000 users and maintains a decent rating of 4.1 stars, suggesting general user satisfaction. However, the lack of visible developer information and company details reduces transparency and accountability. The extension's purpose of unblocking CORS (Cross-Origin Resource Sharing) restrictions is legitimate for web development scenarios.
The combination of permissions creates significant security risks. The debugger permission is particularly concerning as it allows deep system access that could be exploited to manipulate other extensions or browser functionality. The broad host permissions across all URLs mean this extension can potentially intercept, modify, or steal data from any website you visit. While the storage permission alone is relatively benign, combined with the other permissions it could be used to persistently store sensitive intercepted data.
The extension's core functionality of bypassing CORS restrictions, while useful for developers, inherently weakens browser security protections designed to prevent malicious cross-origin requests.
Consider running this extension in a separate Chrome profile dedicated to development work only. Disable the extension when not actively needed for development tasks. Monitor your browsing activity and be cautious about using it while accessing sensitive websites like banking or personal accounts. If possible, use alternative development tools or local proxy solutions that don't require such broad browser permissions.
| https://clients2.google.com/service/update2/crx | https://webextension.org/listing/access-control.html | |
| https://webbrowsertools.com/test-cors/ |
{ "name": "CORS Unblock", "icons": { "16": "/data/icons/disabled/16.png", "32": "/data/icons/disabled/32.png", "48": "/data/icons/disabled/48.png", "64": "/data/icons/disabled/64.png", "128": "/data/icons/disabled/128.png", "256": "/data/icons/disabled/256.png", "512": "/data/icons/disabled/512.png" }, "action": {}, "version": "0.5.2", "background": { "service_worker": "worker.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "__MSG_description__", "permissions": [ "storage", "declarativeNetRequest", "debugger" ], "homepage_url": "https://webextension.org/listing/access-control.html", "default_locale": "en", "host_permissions": [ "<all_urls>" ], "manifest_version": 3 }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.