Whatever Origin Logo

Whatever Origin

The original open source CORS Proxy, bypassing Same-Origin Policy since 2011.

Key Features

Bypass Same-Origin Policy

Access resources from any domain, overcoming browser restrictions.

Return as JSONP Callback

Get proxied requests as JSONP for easy cross-domain integration.

Usage

# Simple GET
fetch(`https://whateverorigin.org/get?url=${encodeURIComponent('https://example.com')}`)

# GET + JSONP (using $.getJSON)
$.getJSON(`https://whateverorigin.org/get?url=${encodeURIComponent('https://example.com')}&callback=?`, function(data) {
  // data.contents contains the remote content
  console.log(data.contents);
});

# GET + JSONP (using <script> tag)
<script src="https://whateverorigin.org/get?url=${encodeURIComponent('https://example.com')}&callback=myCallbackFunction"></script>
# And in your JavaScript:
function myCallbackFunction(data) {
  // data.contents contains the remote content
  console.log(data.contents);
}

From The Creator

When I was facing Same-Origin Policy problems while developing Bitcoin Pie, I was excited to discover how anyorigin.com solved the issue for me ... only, a week later it stopped working for some https sites. Having recently discovered Heroku and Play! Framework, I found that deploying a simple server app is no longer a big deal, and so made out to develop a simple, open source alternative to Any Origin.


— Ron “ripper234” Gross, creator of Whatever Origin

FAQ

What is Whatever Origin?

Whatever Origin is a proxy to bypass the Same-Origin Policy restriction. Originally developed by Ron Gross.

How does it work?

It works by sending a request to the server, which then fetches the requested resource and returns it to the client. This way, the browser does not block the request due to same-origin policy.

Can I use Whatever Origin in production?

This public API has strict limits at 20 rpm per website, with speed and concurrency restrictions, and no uptime guarantees. For faster proxy, please self-host Whatever Origin or use production-ready CORS proxy by Corsfix.