Re: [beacon] CORS and Credentials questions.

On Wed, Jan 8, 2014 at 9:00 AM, doug.turner@gmail.com <doug.turner@gmail.com
> wrote:

> What I understand is (
> https://developer.mozilla.org/en-US/docs/HTTP/Access_control_CORS):
>
> “””
> Also, if POST is used to send request data with a Content-Type other than
> application/x-www-form-urlencoded, multipart/form-data, or text/plain, e.g.
> if the POST request sends an XML payload to the server using
> application/xml or text/xml, then the request is preflighted.
>

It'd be nice if we can avoid preflights. Out of curiosity, why is
"text/plain" considered "safe" whereas "text/xml" is not? Seems completely
arbitrary, and in practice why would I just not mark my XML payloads as
text/plain to avoid extra roundtrip?

Beacon in particular is a bit peculiar in that we don't expect to read the
response, it's just a one way ping...

Received on Wednesday, 8 January 2014 18:21:58 UTC