Access-Control-Allow-Methods: OPTIONS
CORS
Comma-delimited list of the allowed HTTP request methods.
Access-Control-Allow-Methods: POST, GET, OPTIONS
demo
var invocation = new XMLHttpRequest();var url = 'http://bar.other/resources/post-here/';var body = ''; function callOtherDomain(){ if(invocation) { invocation.open('POST', url, true); invocation.setRequestHeader('X-PINGOTHER', 'pingpong'); invocation.setRequestHeader('Content-Type', 'application/xml'); invocation.onreadystatechange = handler; invocation.send(body); }}// ...... Arun