Access-Control-Allow-Origin
Access-Control-Allow-Origin copied to clipboard
evil.com?
Hi, I really like this extension and I use in many of my development, however, I don't get why there's a request with evil.com?
I got the same situation, and felt so weird
this extension was written on the knees with a beer one evening as a potentially useful tool, next week I found out that chrome has flags so it was almost no sense in it. (I still wondering how this extension got 200k+ downloads) As for evil.com - it was joke and small reminder that we need take care about what we allow in our CORS headers.
I know that many people complain about this and some other stuff, so I promise to update extension till next monday (29/05/2017) and make this field editable. Need finally proceed with development and make it useful again :)
Hi @vitvad I really appreciate your answer. Thanks for that. It would be nice make it editable.
One evening? You are a legend 😄
(29/05/2017) ....
I so fucking lazy...
@vitvad my heart sank when I saw that header
And mine...
Me too ...
Me too! Never thought I'd get a notification from sentry with evil.com in it. Would it be possible to allow users to pass in a blank origin instead of evil.com?
so...still not updated
Is this updated in the year 2018?
@fire-stone It has not been updated, you can see the header set as a var in background.js
which was last updated sometime in October of 2015.
haha i laughed at this