Chrome bites me today. Opening a GET xhr connection on a different origin server should not be preflighted IMO. https://www.w3.org/TR/cors/#cross-origin-request-with-preflight-0

First published on twitter (?)