Danno Blammo
Sep 2, 2018 · 1 min read

I’ve tried this in the past and it didn’t have great browser support. I can’t remember which browsers they were, but some of them ignore the response body on OPTIONS requests. We found out the hard way, I think it was desktop Safari that was the big one that failed iirc.

Good browsers will cache an OPTIONS response for varying amounts of time (Chrome for 2 minutes, others will respect the header’s durations) so in a lot of cases it’s a non-issue to begin with. First cors request is a wash and after that there aren’t any preflights for a bit.