Browser & Web Performance · Middle · Question 47 of 75

Which cross-origin request is sent without a preflight?

1GET with an Authorization header
✓Correct answer: POST with Content-Type: application/x-www-form-urlencoded and no custom headers
3POST with Content-Type: application/json

Explanation

Simple requests use GET, HEAD or POST with safelisted headers and one of three content types (form-urlencoded, multipart, text/plain).

Further reading

Test yourself

Take the Browser & Web Performance · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.