CORS Config Generator

Generate CORS configuration

Browser ProcessingYour data never leaves your browser

Allowed Origins

Allow all origins (*)

Enter one origin per line

Allowed Methods

GET

POST

PUT

DELETE

PATCH

OPTIONS

HEAD

Allowed Headers

Allow all headers (*)

Content-Type

Authorization

Origin

X-Requested-With

Cache-Control

Exposed Headers

Headers that browsers are allowed to access (comma-separated)

Max Age (seconds)

How long preflight results can be cached

Allow Credentials

Output Format

Generated Configuration

Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
Access-Control-Allow-Headers: Content-Type, Authorization, Accept
Access-Control-Max-Age: 86400

Twitter Card GeneratorGenerate Twitter Card meta tags

Schema.org GeneratorGenerate JSON-LD structured data

CSP Header BuilderBuild Content Security Policy headers

CORS Config Generator

Related Tools