From e1c89c8a5700de02e2a764dbda68303dff82d608 Mon Sep 17 00:00:00 2001
From: Muki Kiboigo <muki@muki.gg>
Date: Thu, 23 Jul 2026 15:51:11 -0700
Subject: [PATCH] move checks into needsPreflight

---
 src/network/CorsGate.zig | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/network/CorsGate.zig b/src/network/CorsGate.zig
index b7e1cefeb..0cb6b9226 100644
--- a/src/network/CorsGate.zig
+++ b/src/network/CorsGate.zig
@@ -73,6 +73,9 @@ fn isSafelistedContentType(ct: []const u8) bool {
 
 pub fn needsPreflight(transfer: *Transfer) bool {
     const req = &transfer.req;
+    if (req.internal) return false;
+    if (req.resource_type == .document) return false;
+    if (URL.isSameOrigin(req.url, req.cookie_origin)) return false;
 
     for (req.authored_headers) |name| {
         if (!isSafelistedHeader(name)) return true;
@@ -111,8 +114,6 @@ pub fn remove(self: *CorsGate, transfer: *Transfer) void {
 }
 
 pub fn check(self: *CorsGate, transfer: *Transfer) !Result {
-    if (transfer.req.resource_type == .document) return .allowed;
-    if (URL.isSameOrigin(transfer.req.url, transfer.req.cookie_origin)) return .allowed;
     if (!needsPreflight(transfer)) return .allowed;
 
     const client = transfer.client;