Web Security · Middle · Question 38 of 75

Which request does NOT trigger a CORS preflight?

Explanation

Simple requests use GET, HEAD or POST with safelisted headers and content types. That's why servers can't rely on preflight to block form-like requests.

Further reading

Problem with a question

Web Security · Middle · question 38

Test yourself

Take the Web Security · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.

Take this quiz