News for hackers. Stuff that matters.

A comment on Developers don't understand CORS. Parent comment

Re:Developers don't understand CORS by superasn on Wednesday July 10, 2019 @04:56PM (#20406465)
It certainly won't allow me to make xhr POST requests without sending an OPTIONS request first. Are you sure about that?
[ Parent | on HN ]
Re:Developers don't understand CORS by tgsovlerkhgsel on Wednesday July 10, 2019 @05:15PM (#20406636)
Don't trust, verify: https://news.ycombinator.com/item?id=20406633
[ Parent | on HN ]
Re:Developers don't understand CORS by superasn on Wednesday July 10, 2019 @07:21PM (#20407608)
Amazing. You learn something new everyday. Though it does make sense why blocking it won't serve any purpose as form submissions are going thru anyway.

Also glad I didn't mention jsonp. God knows what the devs at ournewbankingapp would do with that one ;)

[ Parent | on HN ]
Re:Developers don't understand CORS by giaour on Wednesday July 10, 2019 @05:13PM (#20406612)
Yes, you can send some POST requests without a preflight OPTIONS request: https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS#Simpl...
[ Parent | on HN ]