Re: [whatwg/fetch] RFC: a mechanism to bypass CORS preflight (#210)

@annevk, @mnot Just wondering - is the use of a 'policy' (JSON format or otherwise) held in the `/.well-known/` directory the 'official' way forward, or is there any chance of resurrecting/using **Access-Control-Allow-Path** or **Access-Control-Policy-Path** or one of their equivalents which directly returns a list of allowed paths where subsequent preflight requests are not required?

I am aware of the bug in IIS, but as I asked earlier, does this still exist, and are there others?

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/210#issuecomment-225051310