title: Same Origin Policy Rules For Different Possible Request types and Scenarios
body: <p>I am trying to understand the Same Origin Policy. (The following assumes only cross-origin requests.)
  From what I have understood so far, for certain requests, it allows only writes and although the request goes through, the response is not readable such as a cross-origin XMLHttpRequest/AJAX GET Request (Having Safe/Allowed Headers). In some cases, both the request passes through and the response is readable such as in cross-origin iframe requests. Whereas in other cases, a preflight check is made and if it succeeds, the request goes through and the response is readable such as a cross-origin XMLHttpRequest/AJAX DELETE request.</p>
  
  <p>In order to better understand this, I have made a table with the possible types of requests and I wanted to know what happens in each of these scenarios and if what I have understood is correct. (As mentioned earlier, assume all the below requests to be cross-origin.)</p>
  
  <p><a href="https://i.stack.imgur.com/zVa1m.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/zVa1m.png" alt="enter image description here"></a></p>