Bluesmoon

CORS flowchart

Thanks for the excellent flowchart on CORS. Do you think the case of a GET request needs further details depending on whether the response allows cross-domain sharing? I guess in the absence of the ACAO response header and when the ACAO header excludes the origin of the script, the XHR request will not pass the server's response to the caller. --Ilgiz (talk) 15:14, 15 October 2015 (UTC)