Cherry pick PR #3943: Disable CORS preflight request upon command lin…

…e flag (#3961) Refer to the original PR: #3943 b/27175039 Co-authored-by: johnx <[email protected]>
youtube · Aug 9, 2024 · d3f7c42 · d3f7c42
1 parent f445564
commit d3f7c42
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/cobalt/loader/cors_preflight.cc b/cobalt/loader/cors_preflight.cc
@@ -244,6 +244,9 @@ bool CORSPreflight::IsPreflightNeeded() {
   if (force_preflight_) {
     return true;
   }
+  if (cors_policy_ == network::kCORSOptional) {
+    return false;
+  }
   // Preflight is not needed if the request method is CORS-safelisted request
   // method and all headers are CORS-safelisted request-header.
   std::vector<std::string> unsafe_headers;