Effective Date: September 21, 2026 | Publisher: Raviteja Kamalapuram
Summary: CORS Enabler Engine is a local developer debugging tool. It operates exclusively on user-configured origins using declarative header modification rules. No HTTP request content, response payloads, or URLs are ever transmitted to any remote servers.
1. Single Purpose
CORS Enabler Engine enables web developers to configure and test cross-origin resource sharing headers on local development and test domains without altering production servers.
2. Data Collection and Usage
No Payload Inspection or Storage: Request and response bodies are never inspected, logged, or stored. Header modification occurs locally via Chrome's declarative rules engine.
Zero Remote Analytics: No analytics or telemetry libraries are present.
No Personal Data: No user identities, accounts, or telemetry are collected.
3. Permissions and Justifications
declarativeNetRequest: Used to append appropriate CORS response headers (such as Access-Control-Allow-Origin) to developer-specified origins.
storage: Required to persist enabled origin rules and developer toggles locally on device.