Really puzzled by this mistake. All versions of IE, even those that support CORS, throw "denied permissions" when I try to make a PATCH request for cross-domain access (using jQuery.ajax). All other methods (even PUT) work correctly, but PATCH causes an immediate error when send () is called.
Given that later versions of IE support CORS and supposedly support all types of methods, is there any reason that CORS + PATCH will result in an error?
(And yes, Access-Control-Allow-Methods is set to GET, POST, DELETE, PATCH, PUT, OPTIONS , so I don't think the problem is.)
source share