microsoft / microsoft/vscode-docs
CORP header missing in instructions how to test web extensions
Open
@osortega is already working on this.
Since Jun 25, 2026.
doc-enhancement
- Dominant language
- Markdown
- Stars
- 6.6k
- Forks
- 5.8k
- Avg merge
- 11h 43m
- Merged PRs (30d)
- 123
Description
Test your web extension in vscode.dev needs one extra step to properly serve web extensions from localhost. The Cross-Origin-Resource-Policy: cross-origin header is required. This can be added by creating a serve.json:
cat > serve.json << EOF
{
"headers": [
{
"source": "**/*",
"headers": [
{
"key": "Cross-Origin-Resource-Policy",
"value": "cross-origin"
}
]
}
]
}
EOF
Without the CORP header the extension icon and other resources do not load.
For example our HLASM extension which runs in web workers and requires SharedArrayBuffer to function does not start at all without this extra header.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.