toolness/postmessage-proxied-xhr — Issue #1: Preflighted requests
Author: bhazzard
Created: 2012-01-19 04:01:38+00:00
State: open

You mention that for security reasons, you have not implemented preflighted requests. Is there a way to do this safely, or is it simply impossible to do it safely in JavaScript?

Also, can you point me towards any good resources to better understand the risks with allowing non-simple requests cross-domain?

Sorry for submitting this as an issue. I wasn't sure of a better way to ask.