Re: [whatwg/fetch] Tighten `application/x-www-form-urlencoded` CORS safe-list carveout? (Issue #1706)

> (It was also very much intentional to allow that without preflight contrary to what OP suggests.)

Just so I'm clear, you're saying it was always intentional that cross-origin `application/x-www-form-urlencoded` non-`<form>`-initiated requests _not_ require a preflight? I don't know the history around all of this, but that surprises me a little bit. If the intention was to always have all kinds of "form urlencoded" requests bypass preflights, then you can basically treat `application/x-www-form-url-encoded` as `application/please-bypass-preflight` anywhere you can specify it.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/1706#issuecomment-2248234575
You are receiving this because you are subscribed to this thread.

Message ID: <whatwg/fetch/issues/1706/2248234575@github.com>