diff --git a/Userland/Applications/Browser/BrowserWindow.cpp b/Userland/Applications/Browser/BrowserWindow.cpp index 6e3d463b70..b2f1efa3dc 100644 --- a/Userland/Applications/Browser/BrowserWindow.cpp +++ b/Userland/Applications/Browser/BrowserWindow.cpp @@ -381,7 +381,7 @@ void BrowserWindow::build_menus() active_tab().m_web_content_view->debug_request("same-origin-policy", action.is_checked() ? "on" : "off"); }, this); - same_origin_policy_action->set_checked(true); + same_origin_policy_action->set_checked(false); debug_menu.add_action(same_origin_policy_action); auto& help_menu = add_menu("&Help"); diff --git a/Userland/Libraries/LibWeb/Page/Page.h b/Userland/Libraries/LibWeb/Page/Page.h index 4622603674..db34d76b38 100644 --- a/Userland/Libraries/LibWeb/Page/Page.h +++ b/Userland/Libraries/LibWeb/Page/Page.h @@ -66,7 +66,8 @@ private: RefPtr m_top_level_browsing_context; WeakPtr m_focused_context; - bool m_same_origin_policy_enabled { true }; + // FIXME: Enable this by default once CORS preflight checks are supported. + bool m_same_origin_policy_enabled { false }; }; class PageClient {