5 ms·
It certainly won't allow me to make xhr POST requests without sending an OPTIONS request first. Are you sure about that?
by superasn 7y ago
It certainly won't allow me to make xhr POST requests without sending an OPTIONS request first. Are you sure about that?
- giaour 7y agoYes, you can send some POST requests without a preflight OPTIONS request: https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS#Simple_requests https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS#Simpl...
- tgsovlerkhgsel 7y agoDon't trust, verify: https://news.ycombinator.com/item?id=20406633 https://news.ycombinator.com/item?id=20406633
- superasn 7y agoAmazing. You learn something new everyday. Though it does make sense why blocking it won't serve any purpose as form submissions are going thru anyway. Also glad I didn't mention jsonp. God knows what the devs at ournewbankingapp would do with that one ;)