I am testing some csrf stuff, and I am wondering if it is possible to POST a cross domain ajax request with Content-Type: application/json
Every time I try
It is possible if your browser supports so called Cross-Origin Resource Sharing (CORS), and all modern browsers, support this nowadays. In short, server should provide you Access-Control-Allow-Origin
header.
Also, regarding the fact that, as you've said, you does not bother about getting any information as response, why don't you just submit some form?