Access-Control-Allow-Methods
The Access-Control-Allow-Methods response header specifies the method or methods allowed when accessing the resource in response to a preflight request.
Syntax
Access-Control-Allow-Methods: <method>, <method>, ...
Directives
- <method>
- Comma-delimited list of the allowed HTTP request methods.
Examples
Access-Control-Allow-Methods: POST, GET, OPTIONS
Specifications
Browser compatibility
| Feature |
Chrome |
Edge |
Firefox |
Internet Explorer |
Opera |
Safari |
| Basic support |
4 |
12 |
3.5 |
10 |
12 |
4 |
| Feature |
Android webview |
Chrome for Android |
Edge mobile |
Firefox for Android |
IE mobile |
Opera Android |
iOS Safari |
| Basic support |
2.1 |
Yes |
Yes |
4 |
Yes |
12 |
3.2 |
Compatibility notes
- The wildcard value (*) that is mentioned in the latest specification, is not yet implemented in browsers:
See also