MajesticHobo2 2 days ago

There doesn't need to be any kind of "polyglot payload". Local network services and devices that accept only simple HTTP requests are extremely common. The request will go through and alter state, etc.; you just won't be able to read the response from the browser.

1
EGreg 2 days ago

Exactly. People who are answering must not have been aware of “simple” requests not requiring preflight.