title: Debugging Access-Control-Allow-Origin with Chrome/WebKit
body: <p>I'm trying to use <a href="http://www.w3.org/TR/cors/" rel="noreferrer">Cross-Origin Resource Sharing</a> with Access-Control-Allow-Origin and related headers.  I have it working on Firefox, but Chrome is giving me permission errors, that look this like:</p>
  
  <pre><code>XMLHttpRequest cannot load &lt;remote&gt;. Origin &lt;local&gt; is not allowed by Access-Control-Allow-Origin.
  </code></pre>
  
  <p>The network inspector shows the request but no response (and doesn't include the OPTIONS preflight request and response).  I inspected the request output using curl and reproducing all the headers, and what I see fits what the specification implies (and again, what Firefox accepts).  I'm at a loss how to debug this further -- are there tricks for seeing the network activity at a lower level than what Chrome normally provides?  Information about how Chrome interprets CORS requests differently than Firefox?</p>