--disable-web-security Command and its effects.

[Alp Tunga]

Hello All.

I have been trying to find an exact statement about "--disable-web-security" what this command does.

Anyone has a document or article about this?

[PhistucK]

It cancels all of the cross origin blockage, you can XMLHttpRequest or fetch any URL, for example.

☆PhistucK

--
--
Chromium Discussion mailing list: chromium...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-discuss

---
You received this message because you are subscribed to the Google Groups "Chromium-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-discu...@chromium.org.

[Jonathan Garbee]

Looks like it was removed last year: http://peter.sh/experiments/chromium-command-line-switches/?date=2015-05-14#disable-web-security

[PhistucK]

What makes you think it was removed (other than that misleading red note in the specific link you mentioned)? It is there in the current list (and trust me, I, unfortunately, know it for a fact that it works, even in the latest canary) -

http://peter.sh/experiments/chromium-command-line-switches/#disable-web-security

If you tried it and it did not affect anything, then this is because you also need --user-data-dir in order to show Chrome that you actually know what you are doing (or it just shows that you copy-pasted an updated article ;)).

☆PhistucK

[Jonathan Garbee]

Ah, user data dir is what I missed testing. I guess the security bypass stuff needs it, just like the flag to treat an unsafe origin as safe.

[Jonathan Garbee]

It was changed at the end of last year to require the `--user-data-dir`. Ref: https://groups.google.com/a/chromium.org/forum/#!topic/blink-dev/KYCfKai_Hvc Just in case anyone else comes across this when searching.