Moesif Orign & CORS Changer(跨域请求) v0.4.3

此插件允许您发送跨域请求。您还可以覆盖请求源和CORS头。

此插件允许您直接从浏览器发送跨域请求，而不接收跨源错误。

您可以使用此插件覆盖请求源站标头，还可以将访问控制允许源站设置为*。

更新：我们收到Chromium团队的评论，对于CORB的请求飞行前拦截的支持，因此CORS仍有待最终确定。在这一点上，这个扩展应该适用于某些场景，但不是所有场景，我们相信它仍然是所有CORS扩展中功能最强大的。我们会及时通知你的。

您可以覆盖：

请求头：源

响应头：访问控制允许来源、访问控制允许方法、访问控制允许头、访问控制允许凭据、访问控制公开头

CORS指南：

https://www.moesif.com/blog/technical/cors/authoritive-Guide-to-cors-Cross-Origin-Resource-Sharing-for-REST-api/

免责声明：这个工具绕过了CORS的安全规则烘焙到每一个浏览器，是为了测试您自己的网站在开发过程中。一些生产网站如googledocs或Facebook可能会抱怨，如果他们发现了一些意想不到的事情。您可以使用白名单功能仅为某些域启用。为避免安全问题，建议在调试后关闭。

关于Moesif：

莫西夫(https://www.moesif.com)使UPS、Radar、Deloitte和其他公司的API团队能够深入了解客户API的使用情况，并通过以用户为中心的API分析和监控提供更好的API产品，从而使您能够：

-通过用户行为分析了解客户API使用情况。

-使用高基数API日志和度量快速调试问题。

-对影响客户的问题保持警惕。

-使用自定义仪表板跟踪API KPI。

-触发行为电子邮件，让客户了解情况。

-检测和阻止API威胁和滥用，包括OWASP十大API威胁。

This plugin allows you to send cross-domain requests directly from browser without receiving Cross Origin Errors. 

You can override the Request Origin header with this plugin and also have Access-Control-Allow-Origin set to *.

-----

UPDATE: in version 0.4.1, we fixed an issue caused by CORB feature in Chrome 72. In addition, this extension now supports more features: Whitelist by domains and change Access-Control-Expose-Headers

-----

You can override:

Request Headers: Origin

Response Headers: Access-Control-Allow-Origin, Access-Control-Allow-Methods, Access-Control-Allow-Headers, Access-Control-Allow-Credentials, Access-Control-Expose-Headers

Guide on CORS: 

https://www.moesif.com/blog/technical/cors/Authoritative-Guide-to-CORS-Cross-Origin-Resource-Sharing-for-REST-APIs/

DISCLAIMER: This tool circumvents CORS security rules baked into every browser and is intended for testing your own website during development. Some production websites like Google Docs or Facebook may complain if they detect something that isn't expected. You can use the whitelist feature to only turn on for some domains. To avoid security issues, it is recommend to turn off after debugging. 

About Moesif: 

Moesif (https://www.moesif.com) is the most advanced API Analytics service that enables API product managers and developers to deeply understand how their customers and partners use their APIs and automate the debugging of customer issues with features like SmartDiff. 

Data-driven teams at companies like Deloitte, PowerSchool, Rev, DHL, Act-On, and thousands of others use Moesif to rapidly build awesome APIs and developer experiences that keeps customers happy.

浏览器插件安装详细步骤：Chrome浏览器如何安装插件扩展