Simple CORS Requests (No Options Preflight)

Simple requests must meet ALL of the following criteria:

• Method: Only GET, HEAD, or POST
• Headers: Only CORS-safelisted headers like:
  • Accept
  • Accept-Language
  • Content-Language
  • Content-Type (with specific values only)
  • Origin (automatically added by browsers)
• Content-Type: Only these values:
  • application/x-www-form-urlencoded
  • multipart/form-data
  • text/plain

---

Backlinks

• Complex/Non-Simple CORS Requeset that triggers OPTIONS preflight