Cross-Origin Resource Sharing (CORS) is a mechanism that uses additional HTTP headers to tell browsers to give a web application running at one origin, access to selected resources from a different origin.

CORS Header Generator

Generate Cross-Origin Resource Sharing headers for various servers.

Configuration

Set your CORS policies

Access-Control-Allow-Origin

Access-Control-Allow-Methods

Access-Control-Allow-Headers

Access-Control-Max-Age (seconds)

Access-Control-Allow-Credentials

Generated Output

Copy the configuration for your environment

Raw HTTP Headers

Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Content-Type, Authorization
Access-Control-Max-Age: 86400

Nginx Configuration

add_header 'Access-Control-Allow-Origin' '*' always;
add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS' always;
add_header 'Access-Control-Allow-Headers' 'Content-Type, Authorization' always;
add_header 'Access-Control-Max-Age' 86400 always;

Express.js Middleware

const cors = require('cors');

app.use(cors({
  origin: '*',
  methods: ['GET', 'POST', 'OPTIONS'],
  allowedHeaders: ['Content-Type', 'Authorization'],
  maxAge: 86400,
  credentials: false
}));

IP Geolocation Lookup

Look up any IP address to find its geographic location, ISP, ASN, time zone, currency, and more. Fre…

Web & Security Directory

Curated interactive directory of 30+ of the best search engines, threat registries, and threat datab…

Email Header Analyzer

Analyze email headers to trace delivery path, check SPF/DKIM/DMARC authentication, and identify spam…

HTTP Header Checker

Check HTTP response headers for any URL. Analyze security headers like CSP, HSTS, X-Frame-Options, a…

What Is My IP

Instantly detect your public IPv4 and IPv6 address. See your location, ISP, time zone, and coordinat…

WiFi QR Code Generator

Generate QR codes for WiFi sharing. Enter SSID, password, and encryption type. Phones scan to auto-c…

Toolzium