ToolsTray CORS & API Helper von Ramsudharsan Manoharan

This extension works only on the ToolsTray API Client at https://toolstray.com/tools/api-client. It
does nothing on any other site, and it is not a general-purpose CORS unblocker.

A browser tab is not allowed to make the requests an API client needs to make. It is subject to CORS,
so an API that has not explicitly allowed the page refuses to answer at all. It can read only seven
response headers. It cannot read Set-Cookie, cannot see the redirects it was sent through, and
refuses to send headers the browser writes itself, such as Origin, User-Agent and Cookie.

With this extension installed, the API Client can:

• Send without CORS, so an API that never allowed the page still answers.
• Show every response header the server sent, not the seven a page may read.
• Send Origin, User-Agent, Cookie, Referer and the rest exactly as you type them.
• Report the cookies the server set and the chain of redirects it sent you through.
• Break the time down into connecting, waiting and downloading.
• Answer Digest and NTLM authentication challenges, which a page cannot do at all.

Permissions are asked for one address at a time. Installing it grants nothing: the first time a
request needs a host, the extension asks for that host alone, and you can withdraw any of them from
your browser's extensions page whenever you like.

It collects nothing, sends us nothing, contains no analytics and no remote code. Requests go from
your machine to the address you typed. Privacy policy: https://toolstray.com/privacy