Website Security
Processed on your deviceCORS & Preflight Decision Laboratory
Simulate a browser CORS decision and audit wildcard credentials, null origins, Vary behavior, exposed headers and mutation methods.
CORS request/response JSON or header trace
The result models the supplied sample only. CORS is not an authorization control and does not protect non-browser clients.
Deterministic evidence-bound result
Simulate browser CORS decision