XMLHttpRequest ( CORS ), , (OPTIONS) . , . CORS, Access-Control-Request .
Access-Control-Request-Headers , , . "" , , : Accept, Accept-Language, Content-Language, Last-Event-ID Content-Type ( : application/x-www-form-urlencoded, multipart/form-data text/plain).
Access-Control-Request Access-Control-Allow . Access-Control-Allow-Headers: key1, key2.