Hacker News new | ask | show | jobs
by MajesticHobo2 376 days ago
There doesn't need to be any kind of "polyglot payload". Local network services and devices that accept only simple HTTP requests are extremely common. The request will go through and alter state, etc.; you just won't be able to read the response from the browser.
1 comments

Exactly. People who are answering must not have been aware of “simple” requests not requiring preflight.