Disable-web-security in Chrome 48+

google-chrome security same-origin-policy
Anatoly Sazanov picture Anatoly Sazanov · Feb 16, 2016 · Viewed 195.8k times · Source

I have a problem with the --disable-web-security flag. It is not working in Chrome 48 and Chrome 49 beta on Windows.

I've tried killing all of the instances, reboot and run Chrome with the flag first of all, tried different machines as well. In the beta I can see the warning popup ("You are using unsupported flag.."), but CORS is still being enforced. Public version seems to ignore the flag completely.

There seems to be no news or people reports about that, so it might be a local issue. Will be grateful for help or any related info.

Answer

David Amey picture David Amey · Feb 19, 2016

I'm seeing the same thing. A quick google found this question and a bug on the chromium forums. It seems that the --user-data-dir flag is now required. Edit to add user-data-dir guide

Related questions

Trying to disable Chrome same origin policy

I'm trying to follow a melonJS tutorial. It says I should disable cross-origin request using one of two methods: --disable-web-security --allow-file-access-from-files** I've tried both of these in my command prompt as such: C:\Users\danniu>C:\Users\danniu\AppData\…

Read More
The `--disable-web-security` command is seems no longer working

The command --disable-web-security to allow for cross domain requests on Chrome is no longer working, I presume due to the latest update. Is there a workaround for this, besides downloading an older version of chrome and disabling updates? Might as …

Read More
XMLHttpRequest cannot load file. Cross origin requests are only supported for HTTP

I am getting the following error: XMLHttpRequest cannot load file:///C:/Users/richa.agiwal/Desktop/get/rm_Library/templates/template_viewSettings.html. Cross origin requests are only supported for HTTP. I realize that this question has been answered before, but …

Read More