CORB `application/json` collision

Hello.

I have a django json-rpc server and frontend which requests this json methods.

When browser make preflight request, server send this response:

(!) Here is correct response for OPTIONS query.

< HTTP/1.1 200 OK
< Server: gunicorn/19.7.1
< Date: Mon, 05 Aug 2019 17:47:12 GMT
< Connection: close
< Content-Type: text/html; charset=utf-8
< Content-Length: 0
< Vary: Origin
< Access-Control-Allow-Credentials: true
< Access-Control-Allow-Origin: https://order.reg.ru
< Access-Control-Allow-Headers: accept, accept-encoding, authorization, content-type, dnt, origin, user-agent, x-csrftoken, x-requested-with, x-csrf-token
< Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT
< Access-Control-Max-Age: 86400

But web-browser (e.g. Chrome) thows warning about CORB violation, because browser expect Content-Type from OPTIONS response as application/json.

How to override Content-Type for all cors answers in project?

[adamchainz]

It’s not directly possible but you can subclass the middleware from:

class MyCorsMiddleware(CorsMiddleware):
    def process_request(self, request):
        response = super().process_request(request)
        if response is not None:
            response['Content-Type'] = 'foobar'  # whatever you want
        return response

If this works for you please let me know as I’ll patch the library then. I haven’t found time to reproduce your issue.

[bashkirtsevich]

OK, I’m checking for now.