These are the documents for the HTTP methods that should not be allowed with XMLHttpRequest:
TRACE http://www.kb.cert.org/vuls/id/867593 TRACK http://www.kb.cert.org/vuls/id/288308 CONNECT http://www.kb.cert.org/vuls/id/150227 -- Anne van Kesteren <http://annevankesteren.nl/> <http://www.opera.com/>
