LockerProject/Locker — Issue #857: POST to /push/:dataset fails due to missing CORS headers if Content-Type is set
Author: beaugunderson
Created: 2012-02-23 04:43:53+00:00
State: open

This will need to be fixed to fix to implement #855.

If you specify a Content-Type (like `application/json`) then you can't post to `/push/:dataset` because of Chrome's pre-flight CORS check:

```
XMLHttpRequest cannot load https://api.singly.com/[censored]/push/meta-me.

Request header field Content-Type is not allowed by Access-Control-Allow-Headers.
```