diff --git a/extensions/vertx-http/runtime/src/main/java/io/quarkus/devui/runtime/DevUICORSFilter.java b/extensions/vertx-http/runtime/src/main/java/io/quarkus/devui/runtime/DevUICORSFilter.java index ff8fd0c167f1e..1182bb4e6976c 100644 --- a/extensions/vertx-http/runtime/src/main/java/io/quarkus/devui/runtime/DevUICORSFilter.java +++ b/extensions/vertx-http/runtime/src/main/java/io/quarkus/devui/runtime/DevUICORSFilter.java @@ -25,6 +25,7 @@ public class DevUICORSFilter implements Handler { private static final String HTTPS_LOCAL_HOST = "https://" + LOCAL_HOST; private static final String HTTP_LOCAL_HOST_IP = "http://" + LOCAL_HOST_IP; private static final String HTTPS_LOCAL_HOST_IP = "https://" + LOCAL_HOST_IP; + private static final String CHROME_EXTENSION = "chrome-extension://"; public DevUICORSFilter() { } @@ -53,7 +54,9 @@ public void handle(RoutingContext event) { || origin.startsWith(HTTP_LOCAL_HOST_IP) || origin.startsWith(HTTPS_LOCAL_HOST_IP)) { corsFilter().handle(event); } else { - LOG.errorf("Only localhost origin is allowed, but Origin header value is: %s", origin); + if (!origin.startsWith(CHROME_EXTENSION)) { + LOG.errorf("Only localhost origin is allowed, but Origin header value is: %s", origin); + } response.setStatusCode(403); response.setStatusMessage("CORS Rejected - Invalid origin"); response.end();