A simple header (or CORS-safelisted request header) is one of the following HTTP headers:
Accept
,Accept-Language
,Content-Language
,Content-Type
with a MIME type of its parsed value (ignoring parameters) of eitherapplication/x-www-form-urlencoded
,multipart/form-data
, ortext/plain
.
Or one of these client hint headers:
When containing only simple headers, a requests is deemed simple and doesn't need to send a preflight request in the context of CORS.
Learn more
Document Tags and Contributors
Tags:
Contributors to this page:
teoli,
fscholz,
hbloomer,
Andrew_Pfeiffer,
klez,
kscarfone,
chrisdavidmills
Last updated by:
teoli,