# CORS Plugin issue

**URL:** <https://discuss.konghq.com/t/cors-plugin-issue/1719>\
**Category:** General\
**Created:** [August 20, 2018, 8:40pm UTC](https://discuss.konghq.com/t/cors-plugin-issue/1719 "2018-08-20T20:40:03Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Arun](https://yyz2.discourse-cdn.com/flex036/user_avatar/discuss.konghq.com/arun/32/1889_2.png) [@Arun](https://discuss.konghq.com/u/Arun)\
**Post date:** [August 20, 2018, 8:40pm UTC](https://discuss.konghq.com/t/cors-plugin-issue/1719/1 "2018-08-20T20:40:03Z")

</div>

Hi,

I am using Kong version 0.11.2

I have defined a CORS plugin on an API like this,

 ![52](https://canada1.discourse-cdn.com/flex036/uploads/konghq/original/1X/95e3143bf1e3c593c09e294a5dda3895b4b28d1a.png)

Now when an OPTIONS call is made by browser, a 403 Invalid CORS request is sent back.

It only happens when this header “'Access-Control-Request-Method: POST” is sent by the browser.

I manually changed and did a curl without the “Access-Control-Request-Method” and that seems to return a 200 OK.

I think its normal for a browser to send this request.

Can you please help me identify the issue.

Appreciate your help.

Thanks,  
Arun

---

<div class="post-metadata">

**Author:** ![rodrigues552](https://avatars.discourse-cdn.com/v4/letter/r/f19dbf/32.png) [@rodrigues552](https://discuss.konghq.com/u/rodrigues552)\
**Post date:** [March 22, 2021, 8:52pm UTC](https://discuss.konghq.com/t/cors-plugin-issue/1719/2 "2021-03-22T20:52:34Z")

</div>

Did you get the answer? I am facing the same issue.