The same-origin request policy can be disabled in Chrome using the --disable-web-security flag and in Internet Explorer by changing the security/zone settings.

Is it possible to temporarily disable the same-origin policy in Microsoft Edge?

NOTE: I'm not interested in answers/comments about why this policy exists, why I shouldn't disable it, how to use CORS headers (access-control-allow-origin and the like). I only want to know if there's a way to disable the policy in Edge like you can in other browsers.

  • Do you have full control over the headers the server presents to the client? The officially supported way would be to set the CSP to allow access to whatever resources you desire via the CSP header. Or are you looking to do this only for development purposes? – phyrfox Jan 1 '16 at 21:11

Edge now exposes experimental flags, including CORS functionality. Try typing edge:\\flags in the address bar, then searching for CORS. Making a change requires restarting the browser.

  • This doesn't seem to work for Edge on a Mac, searching for CORS or site doesn't yield anything to disable CORS restrictions. – Juan Mendes Sep 17 '20 at 15:21

No. The concept of security zones is completely gone in Edge; it doesn't respect the Internet Options dialog from IE11 either. Edge has no command-line parameters (though it can be launched from the command line either with shell: followed by its app ID or with microsoft-edge: followed by the URL). The advanced options don't produce anything useful either.

However, there is a workaround, kind of: Edge has a few Group Policy settings. You can open the Local Group Policy Editor by running gpedit.msc if you don't have a domain. Navigate to the Configure the Enterprise Mode Site List policy (in Computer ConfigurationAdministrative TemplatesWindows ComponentsMicrosoft Edge). Sites you put in the "URI" box will be automatically opened in Internet Explorer 11 when you navigate to them in Edge. You can then, of course, configure security settings just as before.

This workaround is really quite sad, and I am always disappointed when rewrites of programs are missing huge chunks of configurability. As has been mentioned in the comments, it may be better to adjust (or even intercept and change via proxy, if you have to) the headers on the appropriate pages.


If you need to do this on Edge for Mac, the options mentioned in the accepted answer don't exist.

You can disable CORS on Edge for Mac: https://add0n.com/access-control.html

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.