News for hackers. Stuff that matters.

A comment on You don't need that CORS request.

Re:You don't need that CORS request by malft on Monday January 03, 2022 @01:37AM (#29778020)
Before you start rearchitecting your app, be sure to check if the only reason you're seeing preflights on GET is that someone added a dumb X-Requested-By header.

(You can even do POSTs without preflight if you use a whitelisted content-type.)

[ Parent | on HN ]
Re:You don't need that CORS request by smarx007 on Monday January 03, 2022 @03:00AM (#29778412)
For example, JQuery: https://stackoverflow.com/questions/3372962/can-i-remove-the...
[ Parent | on HN ]
Re:You don't need that CORS request by sedro on Monday January 03, 2022 @02:16AM (#29778213)
Are you conflating CORS with some specific product?
[ Parent | on HN ]
Re:You don't need that CORS request by ec109685 on Monday January 03, 2022 @05:24AM (#29779252)
No, referring to this: https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS#simpl...

And the case where preflight isn’t needed despite using CORS.

[ Parent | on HN ]