EErgoKit

Security / Developer

CORS Tester

Test preflight and simple CORS responses without exposing response bodies.

Server-side checkPublic web targetsResponse body hidden
Runner

Test CORS behavior

Submitted inputs are checked transiently by ErgoKit Workers. Results are not stored.

Enter a public endpoint and origin to test preflight response headers.

Checks

  • OPTIONS preflight status
  • Allowed origin
  • Allowed methods and headers
  • Credentials and Vary handling

Result

  • Preflight verdict
  • Access-Control headers
  • CORS issues
  • Fix recommendations

Guardrails

  • Public HTTP and HTTPS endpoints only
  • Private and local network targets blocked
  • Response body is not displayed
  • CORS headers inspected transiently

Privacy

Submitted URLs are checked by ErgoKit's Worker runtime. Results show metadata only; response bodies are not displayed.