2 ms·
Except CORS policies can be dynamic, depending on the request context.
by orf 5y ago
Except CORS policies can be dynamic, depending on the request context.
- ryanbrunner 5y agoIt doesn't seem impossible that the static file could have an indicator for "send an OPTIONS in this case". 95% of CORS setups don't need to look at the request beyond the origin requesting it (and I'd wager that almost all CORS-enabled APIs just blindly allow everything).