Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How does Google Chrome's Advanced REST client make cross domain POST requests?

How does Google Chrome's ADVANCED REST CLIENT plugin make cross domain POST requests? I thought maybe something with CORS but I don't see "Access-Control-Allow-Origin" in any response. This is a link to the plugin:

https://chrome.google.com/webstore/detail/hgmloofddffdnphfgcellkdfbfbjeloo/related?hl=en-US

like image 652
sarah_leah Avatar asked Jun 20 '12 19:06

sarah_leah


People also ask

How do I use Google Advanced REST client?

Step 1: Go to the 'Chrome Web Store' then search for 'Advanced search Client' and click on 'Advanced Rest Client'. Step 2: Click on 'Add to crome' button'. Step 3: Click on the 'Add extension' button to add Advanced Rest Client on Google Chrome Extension.

Can Chrome extensions bypass CORS?

The only solution is to add permissions to your manifest. These can be partially-regexed, for example: "permissions": [ "*://*. twitter.com/*" ], . Thankfully, there is no way for an extension to completely bypass Chrome's own CORS policy.

Which of the following features of advanced REST Client are available in the plugin in Google Chrome?

Advanced REST Client You can instantly use to create and test custom HTTP requests. It possesses the following features. Brings the Google Drive integration where you can archive your requests. Supports the collaboration of work using its backend service that stores and represents data.

How do I use cross domain CORS extension?

List of feature: - Allow cross domain - Customize Url pattern base on Javascript Regex - Allow enable, disable - Very friendly interface Under the hood: This extension allow Cross-Origin Resource Sharing (CORS) by modify header response from server and add more header to allow CORS request: Access-control-allow-origin ...


1 Answers

Short answer: Extensions are different from normal web pages. They can ask for extra permissions during the course of installation.

(slightly) Long answer: The main requirement of plugins/extensions is that they are able to access different domains. They can ask for extra permission during the installation (The user is typically warned that the extension can access data on those domains).

Take a look at the manifest.json file of the extension you are talking about. More specifically:

"permissions": [
    "<all_urls>", "cookies", "history"
  ]
like image 77
UltraInstinct Avatar answered Oct 20 '22 03:10

UltraInstinct