通过CORS调用接口不支持DELETE方法吗

Question

我尝试在浏览器中用XHR跨域调用REST API中的删除方法，浏览器报错：XMLHttpRequest cannot load http://xxxxx. Method DELETE is not allowed by Access-Control-Allow-Methods.

看了下Response Headers

Access-Control-Allow-Headers:Authorization
Access-Control-Allow-Methods:PUT, POST, GET, HEAD, OPTIONS
Access-Control-Allow-Origin:*

请问通过CORS不支持调用DELETE 方法吗，是出于什么方面的考虑呢？

Answer 1

不支持的，安全考虑