microsoft / microsoft/vscode-docs

CORP header missing in instructions how to test web extensions

Open
#7,845 4 comments 0 reactions 2 assignees View on GitHub

@osortega is already working on this.

Since Jun 25, 2026.

doc-enhancement
Dominant language
Markdown
Stars
6.6k
Forks
5.8k
Avg merge
11h 43m
Merged PRs (30d)
123

Description

Test your web extension in vscode.dev needs one extra step to properly serve web extensions from localhost. The Cross-Origin-Resource-Policy: cross-origin header is required. This can be added by creating a serve.json:

cat > serve.json << EOF
{
  "headers": [
    {
      "source": "**/*",
      "headers": [
        {
          "key": "Cross-Origin-Resource-Policy",
          "value": "cross-origin"
        }
      ]
    }
  ]
}
EOF

Without the CORP header the extension icon and other resources do not load.

For example our HLASM extension which runs in web workers and requires SharedArrayBuffer to function does not start at all without this extra header.

Image

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.