Keep iframes sized to their content

Easy communication between cross-origin browser tabs. Simplified "CORS"ing!

A small xhr wrapper

A CORS proxy for everyone.

🔒 HTTP Headers for Wordpress

A PHP application which runs on Heroku and dumps web site outputs including JavaScript generated contents.

XSS 跨窗口劫持

A secure and elegant cross-iframe API communication library based on postMessage.

TrainmanJS - Cross-Origin Communication Library

Tool For Exploiting Cross-Origin Resource Sharing Vulnerability

Force download cross-origin file with Service Worker

CORS HTTP component (middleware) for Neos Flow

Unified messaging for browser applications

Spring boot Rest API code base - rest-spring-security, flyway-migration, swagger, spring-fox, cors, cross-origin, role-based-authorization, authentication, datetime-utils, current-user-utils, war-package, my-sql, jpa, redis, custom-banner, log4j2, lombok, java8, java1.8

Example project showing how to build a Spring Boot App providing a GUI with ReactJS. Along with an overview article that illustrates the mechanisms of its building and deploying, please visit:

cross-origin postmessage rpc

A lightweight protocol-first iframe runtime for secure host/child embeds with explicit lifecycle and messaging.

Burp Suite extension for discovering, analyzing, and auditing HTTP security headers including CSP, HSTS, CORS, and web security misconfigurations.

Explain browser CORS decisions with typed, actionable diagnostics.

Proof of concept iOS app demonstrating how to serve a local (embedded) website in WKWebView, while also being able to make cross-origin remote AJAX calls and handle cookies without worrying about Same-Site restrictions.