The Access-Control-Max-Age response header indicates how long the results of a preflight request (that is the information contained in the Access-Control-Allow-Methods and Access-Control-Allow-Headers headers) can be cached.


Access-Control-Max-Age: <delta-seconds>


Maximum number of seconds the results can be cached.
Firefox caps this at 24 hours (86400 seconds) and Chromium at 10 minutes (600 seconds). Chromium also specifies a default value of 5 seconds.
A value of -1 will disable caching, requiring a preflight OPTIONS check for all calls.


Cache results of a preflight request for 10 minutes:

Access-Control-Max-Age: 600 


Specification Status Comment
The definition of 'Access-Control-Max-Age' in that specification.
Living Standard Initial definition.

Browser compatibility

Feature Chrome Firefox Edge Internet Explorer Opera Safari
Basic Support 4 3.5 12 10 12 4
Feature Android Chrome for Android Edge mobile Firefox for Android IE mobile Opera Android iOS Safari
Basic Support 2.1 (Yes) (Yes) 1.0 (Yes) 12 3.2

See also

© 2005–2017 Mozilla Developer Network and individual contributors.
Licensed under the Creative Commons Attribution-ShareAlike License v2.5 or later.