Disable Chrome Web Security to Bypass CORS and SOP

By Deshan Nawanjana

• February 27, 2026

Disabling the browser web security features to avoid Cross-Origin Resource Sharing (CORS) Same-Origin policy (SOP) and is very common around web developers. This allows web apps to fetch resources from a different domain, protocol, or port without receiving CORS errors.

"C:/Program Files/Google/Chrome/Application/chrome.exe" --user-data-dir="C:/ChromeDevSession" --disable-web-security

Above command is written with default location of Chrome browser installation. If you have installed Chrome in a different location, please make sure to change it to yours before running.

This command create a new browser session, starting as a guest user. All of the user files will be stored at C:/ChromeDevSession as provided in the command. You can delete the created directory later if necessary.

IMPORTANT: DO NOT visit any of public websites or login with your credentials within this unsafe browser session. This configuration is for development purpose only.