The Cache-Control request header used with EventSource is not in the list of simple request headers and a preflight request is not really an option here in my opinion.
Agreed. I can add that to CORS. I already added Last-Event-ID for that reason, but somehow missed Cache-Control.
-- Anne van Kesteren http://annevankesteren.nl/
