Translations:API:Cross-site requests/9/en

Note that this header must be included in any pre-flight request, and so should be included in the query string portion of the request URI even for POST requests.