AJAX call following 302 redirect sets origin to null

ajax http redirect cross-domain cors

See here, this seems to suggest its related to a "privacy-sensitive" context.

Are there any browsers that set the origin header to "null" for privacy-sensitive contexts?

ajax http redirect cross-domain cors

I set Access-Control-Allow-Origin: null on domain A and that worked.