[cors] Should browsers send non-user-controllable headers in Access-Control-Request-Headers?

From: Benson Margulies <bimargulies@gmail.com>
Date: Wed, 21 Dec 2011 21:16:55 -0500
To: public-webapps@w3.org
Message-ID: <CALhtWkdy5ONb9CO4MNmp5oYSMaeL=ieUcX5Z-3h5gbDoMupBqg@mail.gmail.com>

Chrome sends:

Access-Control-Request-Headers:Origin, Content-Type, Accept

Is that just wrong?

Received on Thursday, 22 December 2011 02:17:30 UTC