You're right about the body when responding a CORS pre-flight request. But this is a general purpose filter, I think CORS (as you replied me before) is handled by AG controller.

Not sure if this is a PL bug. As you said before, CORS is already handled by AG.

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira