# CORS Preflight

## Summary

**CORS Preflight** allows unauthenticated HTTP OPTIONS requests as [per the CORS spec](https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS#Preflighted_requests).

## How to configure

**Core:**

| **YAML**/**JSON** setting | **Type**  | **Default** | **Usage**    |
| :------------------------ | :-------- | :---------- | :----------- |
| `cors_preflight`          | `boolean` | `false`     | **optional** |

### Examples

```yaml
cors_preflight: true
```

**Enterprise:**

Enable **CORS Preflight** in the **Policy Builder** in the Console:

\[enable cors preflight in the console]

**Kubernetes:**

**CORS Preflight** is not customizable with Kubernetes.