{ "chromeWebSecurity": false } seems not work as expected
See original GitHub issue- Operating System: Linux (ubuntu)
 - Cypress Version: 0.20.3
 - Browser Version: Chrome 61
 
Is this a Feature or Bug?
Bug
Current behavior:
test isn’t successful
Desired behavior:
visit “https://www.springermedizin.de” click “login” (https://signon.springer.com/) title should include “Login”
test should be successful
How to reproduce:
run the test
Test code:
{
"pageLoadTimeout": 200000,
"chromeWebSecurity": false
}
describe('SpringerMedizin Spec', function(){
    it('Login and Logout should work as expected', function(){
        cy.visit('https://www.springermedizin.de');
        cy.get('a.personalisation__login').click();
        cy.title().should('include', 'Login');
    });
});
Additional Info (images, stack traces, etc)
CypressError: Timed out retrying: expected '' to include 'Login'
Issue Analytics
- State:
 - Created 6 years ago
 - Comments:9 (3 by maintainers)
 
Top Results From Across the Web
Web Security - Cypress Documentation
Set chromeWebSecurity to false Setting chromeWebSecurity to false in Chrome-based browsers allows you to do the following: Display insecure content. Navigate ...
Read more >Disable Chrome Web Security for Cypress Testing
While it is possible to change the Cypress config object during a test by using. Cypress.config("chromeWebSecurity", false).
Read more >cypress-io/cypress - Gitter
hi! I'm trying to run tests with localhost:3030 url and it is showing a blank page, I've tried even with cy.visit('https://www.google.com ...
Read more >How to write end-to-end tests with Cypress and Node.js
In the root of your project, run the following commands: ... fail if we didn't add "chromeWebSecurity": false in our cypress.json config.
Read more >Web Security - Cypress - w3resource
Setting chromeWebSecurity to false in Chrome-based browsers enables you to do the following: Display an insecure content; Navigate to any ...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found

@SteveBrandt @jennifer-shehane
{“chromeWebSecurity”: false} does not work for me either. Are there other tricks to getting this to bypass Cypress’ cross-origin restriction? This is the only conversation I’ve found online about it.
Chrome console displays "refused to display “https://…” in a frame because it set ‘X-Frame-Options’ to ‘sameorigin’.
I’m testing an app that does a lot of cross-origin navigation, and turning off web security in necessary for me. I can’t seem to get past this error, and any help would be very appreciated!
Unfortunately looking through their documentation and the number of open issues this seems to be a seriously and seemingly permanent blocker to using Cyprus for legitimate testing. It’s too bad that a blocker like this just stops its usability dead in its tracks…
Our app uses a Stripe payment iframe, we cannot target and change the input value because of the security issues, so now Cyprus cannot test our actual user workflows which renders it relatively useless unfortunately.