I haven't been able to prove that this actually does anything in practice. It seems like IE isn't respecting the CORS spec using either one of these patterns.
Can you post some screenshots showing any difference at all in the network traffic? The headers in particular are supposed to be different.
I haven't been able to prove that this actually does anything in practice. It seems like IE isn't respecting the CORS spec using either one of these patterns.
Can you post some screenshots showing any difference at all in the network traffic? The headers in particular are supposed to be different.