3 ms·
Before you start rearchitecting your app, be sure to check if the only reason you're seeing preflights on GET is that someone added a dumb X-Requested-By header
by malft 5y ago
Before you start rearchitecting your app, be sure to check if the only reason you're seeing preflights on GET is that someone added a dumb X-Requested-By header.
(You can even do POSTs without preflight if you use a whitelisted content-type.)
- sedro 5y agoAre you conflating CORS with some specific product?
- ec109685 5y agoNo, referring to this: https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS#simple_requests https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS#simpl... And the case where preflight isn’t needed despite using CORS.
- smarx007 5y agoFor example, JQuery: https://stackoverflow.com/questions/3372962/can-i-remove-the-x-requested-with-header-from-ajax-requests#24719409 https://stackoverflow.com/questions/3372962/can-i-remove-the...