Seems there's a temporary fix

dxa4481 / CORS

JSON API's Are Automatically Protected Against CSRF, And Google Almost Took It Away.

GNU General Public License v3.0

35 stars 3 forks source link

Seems there's a temporary fix #2

Open riramar opened 7 years ago

riramar commented 7 years ago

javascript:alert(navigator.sendBeacon('//www.google.com',new Blob(['1'],{type:'any'}))) VM163:1 Uncaught DOMException: Failed to execute 'sendBeacon' on 'Navigator': sendBeacon() with a Blob whose type is not any of the CORS-safelisted values for the Content-Type request header is disabled temporarily. See http://crbug.com/490015 for details. at :1:28