Your app works on localhost and breaks on HTTPS: sessions lost, cookies silently rejected, CORS failing, mixed content blocked. localhost is a browser special case, so none of it fails until you deploy. This finds it first - run it against the dev server you already have.
nodejs cli cors https devtools cookies developer-tools web-security localhost secure-cookies samesite chrome-devtools-protocol mixed-content playwright pre-deploy secure-context
-
Updated
Sep 8, 2026 - JavaScript