demo · v135

Request rewrite on CORS redirect

Chrome 135 aligns with Firefox / Safari: when a CORS-protected request is redirected and the method changes (e.g. 303 to GET), the body, body-related headers, and referrer policy get re-evaluated. The simulator lets you pick a redirect type and shows what survives.

simulator: works in any browser

request 1 (original)


      

request 2 (after redirect, Chrome 135+)


      

see also