Simple Methods and Headers

Simple Methods

The following methods are considered simple in the CORS specification and are permitted regardless of any value in [cors-policy:<policy-name>] allow-method:
  • GET
  • HEAD
  • POST

Simple Headers

The following headers are considered simple in the CORS specification and are permitted regardless of any value in [cors-policy:<policy-name>] allow-header:
  • Accept
  • Accept-Language
  • Content-Language