Zero-Footprint Native CORS Bypass
Bypass cross-origin restrictions on any localhost or staging API without touching backend code. Dynamically reflects request Origin and supports cookies with Access-Control-Allow-Credentials: true.
- ✓ Safety Self-Destruct Timers: Auto-revert rules after 15m, 1h, or tab close.
-
✓ CSP Stripping: Safely disable
connect-srcblocks on dev sites.