Skip to content

http: document that cross-origin requests need HX-Request-Type allowed - #129

Merged
rameel merged 1 commit into
mainfrom
http/document-request-type-cors
Nov 2, 2026
Merged

rameel merged 1 commit into
mainfrom
http/document-request-type-cors

Conversation

@rameel

@rameel rameel commented Nov 2, 2026

Copy link
Copy Markdown
Owner

With HTMX 1.9.x and 2.x, the Toolkit script adds HX-Request-Type to requests to other origins too.
If such an origin lists its allowed headers explicitly, the browser blocks the request at the preflight,
and an upgrade from 1.x does not reveal this at build time.

With HTMX 1.9.x and 2.x, the Toolkit script adds HX-Request-Type to
requests to other origins too. If such an origin lists its allowed
headers explicitly, the browser blocks the request at the preflight,
and an upgrade from 1.x does not reveal this at build time.

Add a warning to the migration guide and mention it in troubleshooting.
@rameel
rameel merged commit 9560f8d into main Nov 2, 2026
1 check passed
@rameel
rameel deleted the http/document-request-type-cors branch November 2, 2026 20:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant