evil.com? about access-control-allow-origin

[vitvad]

this extension was written on the knees with a beer one evening as a potentially useful tool, next week I found out that chrome has flags so it was almost no sense in it. (I still wondering how this extension got 200k+ downloads)
As for evil.com - it was joke and small reminder that we need take care about what we allow in our CORS headers.

I know that many people complain about this and some other stuff, so I promise to update extension till next monday (29/05/2017) and make this field editable. Need finally proceed with development and make it useful again :)

[vitvad]

(29/05/2017) ....

I so fucking lazy...

[anthify]

@vitvad my heart sank when I saw that header

[ykcai]

haha i laughed at this

[yangfan1122]

I got the same situation, and felt so weird

[leocaseiro]

Hi @vitvad I really appreciate your answer. Thanks for that. It would be nice make it editable.

One evening? You are a legend 😄

[StillLearnin]

And mine...

[mauriciojaramillo]

Me too ...

[prithvin]

Me too! Never thought I'd get a notification from sentry with evil.com in it. Would it be possible to allow users to pass in a blank origin instead of evil.com?

[mountainguan]

so...still not updated

[fire-stone]

Is this updated in the year 2018?

[dundat11]

@fire-stone It has not been updated, you can see the header set as a var in background.js which was last updated sometime in October of 2015.