google-chromexss

enable XSS in chrome and/or safari


I'm developing a native iOs app using cordova to do the native stuff, so I can focus on html/javascript and css. However, I need to make cross-domain ajax calls, which is fine in my native app, but not when I run my project in Chrome. So I would like to disable this security feature in Chrome so I can test my app. Is there an easy way to do this ?

Cheers


Solution

  • Given you are developing an iOS app I assume you are on OSX in which case you can essentially launch Chrome with XXS enabled be executing the following command line:

    open -a "Google Chrome" --args --disable-web-security
    

    In fact, I use it so often I added an alias in my .bash_profile:

    alias chrometest='open -a "Google Chrome" --args --disable-web-security'
    

    This has been working for me for quite some time all the way up to my current version of Chrome: 38.0.2125.104

    Of course you can name it whatever you like…good luck!!!