/validate-cors

Validates CORS configuration by checking headers, origins, and methods against best practices and security guidelines.

Audits CORS configuration for permissive origins, credential misuse, origin reflection, weak allow-list patterns, and preflight gaps across server files and framework configs.

Scans a single URL for HTTP security headers (CSP, HSTS, X-Frame-Options, etc.) and returns a table with missing/misconfigured headers, severity, and recommended fixes.

Diagnoses and fixes CORS configuration errors for Cloudflare R2 buckets with curl test commands and dashboard instructions.

Scans a web project for external asset sources, identifies domains, and generates Content Security Policy headers in enforcing and report-only modes. Outputs as HTTP header and meta tag.

Analyzes HTTP response headers from a URL or file, highlighting security, caching, and content-type issues.