Feature request: per host activation
Closed this issue · 7 comments
Sometimes I may forgot this add on is enabled and it may be a security risk for my daily browsing.
It would be nice to have a feature to enable this addon per host. This way, CORS will be disabled only for custom domain/hosts, e.g. "localhost:4444" or "my.example.com" etc.
Similar to #7, will try to finally work on it.
Although to make my life easier it will probably be a regex filter on host url, which should prove more versatile anyway.
Note that this feature might have a potential performance impact since the addon remains active and each request has to be checked against the whitelist.
@spenibus makes sense. I think that the feature should be optional. It would be worse to let undesired requests to be CORSed.
Of course, host detection is a secondary step. You still need to enable the addon first.
good work! :)
Version 18.5.30.1913 has been pushed to AMO. CORS Everywhere on AMO