MDN doesn't say this, do Access-Control-Allow-Methods and Access-Control-Allow-Headers have defaults if you don't return those headers? I.e. would it be sufficient to just have Access-Control-Allow-Origin for static files to be served?
Need it for a documentation thing.
@Gargron i didn’t realise that *-Methods existed, and it’s been years since I set it up myself, and at the least “get” worked just fine without me being aware that *-Methods existed. so for it to not work now in some browser would mean that browser broke backwards compatibility with my site. (which i haven’t checked)