The usual fix is two-sided: request the image with crossorigin="anonymous" before setting src, and configure the image server to return an Access-Control-Allow-Origin header that allows your page origin. If the server cannot do that, proxy or re-host the asset on an origin you control, avoid canvas pixel readback, or capture the rendered page without exporting canvas data.
Why an image can appear in a screenshot but still fail in JavaScript
Browsers separate visual rendering from permission to read pixels. An image from another origin can be displayed in an <img> element, yet become restricted when you draw it onto a canvas. As MDN describes the rule, “As soon as you draw into a canvas any data that was loaded from another origin without CORS approval, the canvas becomes tainted.”
Once tainted, the canvas throws a security exception when code calls getImageData(), toBlob(), toDataURL() or captureStream(). A normal browser screenshot may still contain the picture because screenshot capture reads the rendered page rather than asking page JavaScript for canvas pixels.
The reverse failure is also common. Adding crossorigin changes the request to CORS mode. If the response does not contain a matching Access-Control-Allow-Origin header, the browser blocks the image itself and logs a CORS error. Thus, the attribute alone is not a bypass; the server must opt in.
#1 Best Overall
- The Anker Advantage: Join the 80 million+ powered by our leading technology.
- Vivid Video: The HDMI adapter lets you connect to any TV or display with an HDMI port to stream video in up to 4K resolution.
- Plug and Play: Instantly turn your laptop’s USB-C port into an HDMI port, with no installation necessary. This product does not support charging or Power Delivery (PD).
- Premium Construction: A lightweight aluminum casing allows for greater heat dissipation, while the reinforced braided-nylon cable is designed to withstand the twists and tugs of daily use.
- Compatibility: Supports USB-C DP Alt mode, USB4, and Thunderbolt connections.
First decide which operation is failing
- Visual screenshot only: Playwright, Puppeteer or another browser tool can often capture the image as rendered, even when canvas readback would be forbidden.
- Canvas processing or export: You need a successful CORS exchange before drawing the image. Otherwise pixel APIs fail.
- Both: Fix the image request and response, then test the exact screenshot and export paths separately.
Screenshot automation does not override browser origin security. It controls a browser; the page still enforces CORS and canvas rules.
Repair the image request and response
1. Find the real origin
Copy the final image URL from the browser’s Network panel, not just the URL written in your source. Compare scheme, hostname and port. A redirect to a CDN, a different subdomain, or an HTTPS-to-HTTP change creates a different origin. Also inspect CSS background-image URLs, SVG <image> elements, fonts and third-party widgets: the visible image may not come from the URL you first noticed.
2. Set crossorigin before loading starts
Markup:
<img id="hero" crossorigin="anonymous" src="https://cdn.example/image.png" alt="">JavaScript:
const img = new Image();
img.crossOrigin = "anonymous"; // must run before src
img.onload = () => {
const canvas = document.createElement("canvas");
canvas.width = img.naturalWidth;
canvas.height = img.naturalHeight;
canvas.getContext("2d").drawImage(img, 0, 0);
canvas.toBlob(blob => console.log("exported", blob));
};
img.onerror = err => console.error("image load failed", err);
img.src = "https://cdn.example/image.png";The request mode is selected when loading begins. Setting crossOrigin after src, or after a framework has started loading the image, is too late. Reload the resource after changing the attribute.
3. Return the matching CORS header
The image response must include Access-Control-Allow-Origin for the requesting site, for example:
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Rank #2
![BENFEI USB C to HDMI Adapter 4K@60Hz, USB Type-C to HDMI Adapter [Thunderbolt 3/4/5 Compatible] with iPhone 15 Pro/Max, MacBook Pro/Air 2023, iPad Pro, iMac, S23, XPS 17, Surface Book](https://m.media-amazon.com/images/I/31kTmzsrThL._SL160_.jpg)
- COMPACT DESIGN - The compact-designed portable BENFEI USB-C to HDMI adapter connects a computer, desktop, laptop, or other devices with USB-C port to a monitor, projector, HDTV, or other devices with HDMI port; Tuck this lightweight gadget into your bag or pocket to do a business presentation with your laptop and projector, or extend your desktop screen to a monitor or TV;
- SUPERIOR STABILITY - Built-in advanced IC chip converts USB-C digital signal to HDMI signal; Please pay attention, the USB-C device should support the USB Type-C DP Alt mode.
- INCREDIBLE PERFORMANCE - The USB-C to HDMI adapter supports resolutions up to 3840*2160@60Hz including, 3840*2160@30Hz, 2K@144Hz, 1080P, 720p, 1600x1200, 1280x1024 for high definition monitors or projectors; Plated USB-C connector resists corrosion and abrasion and improve the signal transmission performance; Molded strain relief increases cable durability
- BROAD COMPATIBILITY - The BENFEI USB-C to HDMI is compatible with iPhone 15 Pro/Max, 13"/15" MacBook Pro/Air, iMac,2023,2022,2021, 2020, 2019, Google Chromebook Pixel, Yoga 900, Dell XPS 13 (9350), Dell XPS 15 9550, Dell XPS12 9250, DellPrecision 5510, HP Spectre X2, HP Spectre x360, HP Elitebook Folio G1, HP Elite x2 1012 G1, Acer Switch Alpha 1, Acer Spin 7, Acer Chromebook R13, Samsung Chromebook Plus, Samsung Galaxy TabPro S,Samsung Galaxy A7 2017, LG G5, LG V20, HTC 10
- 18 MONTH WARRANTY - Exclusive BENFEI Unconditional 18-month Warranty ensures long-time satisfaction of your purchase; Friendly and easy-to-reach customer service to solve your problems timely Compare with similar items
Access-Control-Allow-Origin: https://app.exampleFor a deliberately public, non-credentialed asset, a wildcard policy may be appropriate:
Access-Control-Allow-Origin: *Do not use a wildcard with credentialed requests. If cookies or HTTP credentials are required, use a credentialed CORS configuration: the response must name the permitted origin and include Access-Control-Allow-Credentials: true. Keep the policy limited to origins you intend to trust.
4. Reload into a new canvas
A canvas that has already been tainted cannot be made origin-clean by changing headers later. After the server fix is live, reload every image and draw it into a newly created canvas. Reusing the old canvas can make a successful fix appear ineffective.
5. Test the exact readback API
Do not stop when the image appears. Exercise the operation your application needs:
Rank #3
- CHECK YOUR DEVICE FIRST( USB-C MALE TO HDMI FEMALE): This adapter works with USB Type C ports that support DP Alt Mode. Want to be sure before you buy? Check your device specs - not every USB-C port sends video.
- ONE-WAY VIDEO & AUDIO OUTPUT: This adapter sends video and audio from your USB-C device to an HDMI display. It does not support charging, and it is not designed for HDMI-to-USB-C direction.
- 4K@60Hz USB-C TO HDMI ADAPTER CABLE: Get clear 4K picture at 60Hz from a compatible USB-C laptop or tablet. It also works with older HDMI 1.4, 1.3 and 1.2 screens.
- PLUG AND PLAY, NO SETUP: Turn your USB-C port into an HDMI port with no drivers and no installation. What you see depends on your device and your screen.
- EXTEND YOUR REACH: Going from USB-C male to HDMI female lets you keep using the HDMI cable you already have, and place your laptop or phone where you want it.
ctx.getImageData(0, 0, 1, 1);
canvas.toDataURL("image/png");
canvas.toBlob(blob => console.log(blob));At the same time, check the console and the image response headers. A successful visual load is not proof that pixel access is permitted.
When you do not control the image host
The browser cannot manufacture permission that the remote server did not grant. Your practical choices are:
- Ask the owner to enable CORS for your origin (or for a carefully scoped public policy).
- Proxy or re-host public assets through a server or storage origin you control, adding the correct response header there. Make sure your use complies with the asset owner’s terms and copyright.
- Keep the image display-only. Render it in the page but do not draw it to a canvas or call pixel readback APIs.
- Move private or credentialed fetching server-side. Use an authorized backend request rather than trying to bypass CORS in client code.
Do not rely on browser extensions, disabled security flags or opaque “no-CORS” fetches for production. They change the development environment, not the security model used by visitors and CI browsers.
Playwright and Puppeteer screenshot workflows
For a visual screenshot, let the browser finish rendering and capture the page or element. Playwright supports viewport, element, full-page and device-scale screenshots; Puppeteer likewise automates screenshots of remote pages. Neither tool grants canvas read permission.
Rank #4
- 【5-in-1 Ultimate Productivity HUB】Expand your USB-C port into a high-performance workstation. This usb c hub multiport adapter integrates 4K@60Hz HDMI, 100W PD, USB-C 3.0 (5Gbps), USB-A 3.0/2.0. Perfect for keeping your desk organized and eliminating clutter from multiple dongles.
- 【True 4K@60Hz Visual Feast】Stop settling for blurry 30Hz displays. This USB-C to HDMI adapter supports 4K@60Hz, delivering 2X the smoothness of standard hubs. Ideal for pro video editing, high-stakes presentations, or immersive 4K streaming without motion blur.
- 【100W Pass-Through Fast Charging】Equipped with a high-speed PD 3.0 chip, this usb c to usb adapter supports up to 100W input and provides a stable 90W output to your laptop. Stay powered up during intensive tasks like 3D rendering or long meetings—say goodbye to low-battery anxiety once and for all. 📌Note: For optimal 90W charging, a 100W power adapter and cable are recommended (not included).
- 【Hyper-Speed 5Gbps Data Transfers】Move massive files in seconds! Featuring both USB-C and USB-A 3.0 ports (5Gbps), this usb c hub for laptop is 10X faster than USB 2.0. The additional USB 2.0 port is optimized for wireless mice and keyboards, ensuring a stable connection with zero interference.
- 【Superior Cooling & Ultra-Portable Design】Built with a durable aluminum shell, this docking station improves heat dissipation for reliable use. Its ultra-slim, lightweight design slips easily into your bag—perfect for travel, office, or remote work essentials.
Playwright example
import { chromium } from "playwright";
const browser = await chromium.launch();
const page = await browser.newPage({
viewport: { width: 1440, height: 900 },
deviceScaleFactor: 1
});
page.on("console", msg => console.log("PAGE", msg.type(), msg.text()));
page.on("requestfailed", req => console.error("FAILED", req.url(), req.failure()?.errorText));
await page.goto("https://app.example", { waitUntil: "networkidle" });
await page.screenshot({ path: "page.png", fullPage: true });
await browser.close();Puppeteer example
import puppeteer from "puppeteer";
const browser = await puppeteer.launch();
const page = await browser.newPage();
page.on("console", msg => console.log("PAGE", msg.type(), msg.text()));
page.on("requestfailed", req => console.error("FAILED", req.url(), req.failure()?.errorText));
await page.setViewport({ width: 1440, height: 900, deviceScaleFactor: 1 });
await page.goto("https://app.example", { waitUntil: "networkidle0" });
await page.screenshot({ path: "page.png", fullPage: true });
await browser.close();If your test needs toDataURL() or image analysis, fix CORS first; a screenshot assertion alone will not reveal a tainted canvas. In CI, save console and failed-request logs with the screenshot so you can distinguish a blocked image from a readback exception.
Or skip the browser setup
ScreenshotNeo is a website screenshot API and MCP server. One request returns a PNG, JPEG, WebP or PDF without requiring you to maintain Playwright or Puppeteer. It accepts consent banners before capture and removes more than 60 known consent platforms, newsletter popups and chat widgets; each cleanup step can be disabled. Bot checks or CAPTCHAs, blank pages, timeouts, failed loads and cache hits are not billed, and response headers identify the page verdict and billing status.
For a visual capture, use the API rather than canvas export:
curl -G "https://api.screenshotneo.com/v1/shot" -d access_key=YOUR_API_KEY --data-urlencode url=https://stripe.com -o shot.webpPython:
import requests
r = requests.get("https://api.screenshotneo.com/v1/shot", params={"access_key": "YOUR_API_KEY", "url": "https://stripe.com"}, timeout=90)
r.raise_for_status()
open("shot.webp", "wb").write(r.content)Node.js:
const q = new URLSearchParams({ access_key: 'YOUR_API_KEY', url: 'https://stripe.com' });
const res = await fetch(`https://api.screenshotneo.com/v1/shot?${q}`);
if (!res.ok) throw new Error(`${res.status} ${res.statusText}`);
const fs = await import('node:fs/promises');
await fs.writeFile('shot.webp', Buffer.from(await res.arrayBuffer()));See the parameter reference and response details in the ScreenshotNeo documentation. The API also supports full-page captures with lazy images loaded, CSS-selector element capture, dark mode, 12 device presets and custom viewports, retina scale, PDF paper and page-range controls, custom CSS and JavaScript, click-before-capture actions, hidden selectors, selector/delay/network-idle waits, request and resource blocking, headers, cookies, user agents, Authorization, timezone and geolocation, transparent backgrounds, resizing, configurable-TTL caching, signed image links, asynchronous jobs with signed webhooks, bulk capture for up to 100 URLs per call, a usage API and an OpenAPI specification.
Recommended Free Tools
An MCP server exposes take_screenshot, get_page_info and capture_pdf to Claude, Cursor and other MCP clients. Every plan includes every feature: 1,000 shots per month are free with no card; paid plans start at $5 for 3,000 shots, with yearly billing providing two months free. Create a free ScreenshotNeo account to start.
Best Value
- [Effortless Plug & Play] Crystal-clear and vibrant 4K@60Hz resolution backward compatible for 1440P/2K@144Hz and 1080P@240Hz. Instantly mirror or extend UHD content from your Type-C phone, tablet, laptop, and desktop computer to larger displays like monitors, TVs, and projectors. Leave behind the worries of unstable WiFi and the hassle of drivers. HDCP compliance lets you enjoy media streaming without any limitations.𝗣𝗹𝗲𝗮𝘀𝗲 𝗡𝗼𝘁𝗲: 𝗧𝗵𝗶𝘀 𝗶𝘀 𝗮 𝗼𝗻𝗲-𝘄𝗮𝘆 𝗰𝗮𝗯𝗹𝗲, 𝗱𝗲𝘀𝗶𝗴𝗻𝗲𝗱 𝗲𝘅𝗰𝗹𝘂𝘀𝗶𝘃𝗲𝗹𝘆 𝗳𝗼𝗿 𝘁𝗿𝗮𝗻𝘀𝗺𝗶𝘀𝘀𝗶𝗼𝗻 𝗳𝗿𝗼𝗺 𝗨𝗦𝗕-𝗖 𝗵𝗼𝘀𝘁 𝗱𝗲𝘃𝗶𝗰𝗲𝘀 𝘁𝗼 𝗛𝗗𝗠𝗜 𝗱𝗶𝘀𝗽𝗹𝗮𝘆𝘀.
- [Exquisite Craftsmanship] Every detail is meticulously designed for excellence: The gold-plated connector ensures secure and high-speed data transmission, delivering interference-free performance. A modern upgrade over fragile Serial Cables and finicky wireless dongles — one slim cable delivers interference-free 4K with full HDCP compliance for unlimited media streaming.The uni-body molding ensures an unbreakable connection, while the aluminum case efficiently dissipates heat for extended usage. The thicker copper wire minimizes signal loss, providing maximum conductivity for an impeccable audio-visual experience.
- [Intricate Design] Elevate your experience with impeccable materials. The nylon braided cable jacket offers worry-free usage, eliminating concerns of fraying, heating, or kinking. The non-slip thumb grip provides a comfortable and secure plug-in experience. The streamlined metal pieces seamlessly connect, offering shock-proof reliability. Bonus Velcro tie adds convenience for travel. The stylish gray metallic case with a hint of blue embodies elegance and sophistication.
- [Extensive Compatibility] Designed for Type C ports with video output capability (DP Alt Mode) and Thunderbolt 3 & 4. Enjoy compatibility with a wide range of devices, including iPhone 15/16/17 Series, MacBook Neo, Apple MacBook Pro (2016 and later), iMac (2017 and later), MacBook Air (2018 and later), iPad Pro (2021 and later), Mac Studio, Mac Pro, Surface Book 2/3, Surface Laptop 3, Dell XPS 15/13, HP Chromebook x360, Samsung Galaxy S23/S22/S21/S20/S10/S9/S8, Note 20/10/9/8, LG V40, Steam Deck, and more.
- [WARRKY: Elevating Connections in Work and Life] Provides superb-quality products that harmonize sophistication and affordability, helping you enhance both your work and personal life. We are committed to delivering fast and responsive support within 18 hours. Please consult WARRKY anytime.
Troubleshooting checklist
The image is visible, but getImageData() throws
- Confirm the image was requested with
crossorigin="anonymous"orimg.crossOrigin = "anonymous"beforesrc. - Inspect the final redirected response for
Access-Control-Allow-Origin. - Reload the image and create a new canvas; an already tainted canvas stays tainted.
Adding crossorigin makes the image disappear
- The server is now receiving a CORS request but is not opting in. Add a matching header or remove the attribute if the image is display-only.
- Check the final CDN or redirect host, not only the origin server.
Only some images fail
- Compare each URL, including CSS backgrounds and SVG resources.
- Look for mixed protocols, ports, credential requirements and third-party widgets.
CI screenshots differ from local runs
- Capture browser console and network-failure logs.
- Wait for the relevant selector, image completion or network idle rather than using an arbitrary short delay.
- Separate a visual screenshot assertion from any canvas pixel-export assertion.
Choosing the right fix
| Situation | Best approach | Trade-off |
|---|---|---|
| You control the image server and need pixels | Enable scoped CORS and load with crossorigin |
Requires server configuration and correct credential handling |
| Public asset, no server access | Proxy or re-host it on an authorized origin | Adds infrastructure, bandwidth and content-policy responsibilities |
| Only a visual screenshot is required | Capture the rendered page directly | You cannot use the result as unrestricted canvas pixel data |
| Automated capture at scale | Use a managed screenshot API such as ScreenshotNeo | Application behavior is delegated to the service and its request options |
FAQ
Does mode: "no-cors" solve canvas tainting?
No. An opaque no-CORS response does not grant script access to image pixels. You still need a server-approved CORS response for canvas readback.
Can a service worker remove the remote server’s CORS restriction?
No. A service worker can control requests within its scope, but it cannot turn an unauthorized cross-origin response into permission for arbitrary canvas pixel access.
Why does a cached response behave differently after I fix headers?
An intermediary may have cached a response without the correct origin-varying headers. Purge or bypass the stale cache, then verify the fresh response and recreate the canvas.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Frequently Asked Questions
Does mode: “no-cors” solve canvas tainting?
No. An opaque no-CORS response does not grant script access to image pixels; canvas readback still requires a server-approved CORS response.
Can a service worker remove the remote server’s CORS restriction?
No. It cannot turn an unauthorized cross-origin response into permission for arbitrary canvas pixel access.
Why can a cached response behave differently after fixing headers?
An intermediary may have cached a response without the correct origin-varying headers. Verify a fresh response and recreate the canvas.
The Bottom Line
For canvas exports, set crossorigin before src, return the correct CORS headers, and redraw on a new canvas. For visual-only captures, browser automation can screenshot the rendered page without canvas readback; a managed API can remove that browser setup entirely.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsQuick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
