dojo / core

:rocket: Dojo 2 - language helpers and utilities.
http://dojo.io
Other
213 stars 58 forks source link

request provider always sets X-Requested-With #328

Closed kitsonk closed 7 years ago

kitsonk commented 7 years ago

Bug

While it is helpful to have xhr set the header X-Requested-With as it is a common case for CORS that fails because the end user doesn't know it is often required, if the server you are facing off doesn't allow the header to be specified in the OPTIONS preflight in that is performed in Chromium based browsers, the request fails with the message Request header field X-Requested-With is not allowed by Access-Control-Allow-Headers in preflight response. and there is no way to turn the header off.

Package Version: beta1