On the standards track: Yes
Is Experimental: No
Is Deprecated: No
In Chrome version 3 on 2009-09-15
In Chrome Android version 18 on 2012-06-27
In Edge version 12 on 2015-07-29
In Firefox version 3.5 on 2009-06-30 Note: Starting with Firefox 11, it's no longer supported to use the withCredentials attribute when performing synchronous requests. Attempting to do so throws an NS_ERROR_DOM_INVALID_ACCESS_ERR exception.
In Firefox for Android version 4 on 2011-03-29 Note: Starting with Firefox for Android 14, it's no longer supported to use the withCredentials attribute when performing synchronous requests. Attempting to do so throws an NS_ERROR_DOM_INVALID_ACCESS_ERR exception.
In Internet Explorer version 10 on 2012-10-26 Note: Internet Explorer versions 8 and 9 supported cross-domain requests (CORS) using XDomainRequest.
In Quest Browser version 5.0 on undefined
In Opera version 12 on 2012-06-14
In Opera Android version 12 on 2012-02-25
In Safari version 4 on 2009-06-08
In Safari on iOS version 3.2 on 2010-04-03
In Samsung Internet version 1.0 on 2013-04-27
In WebView Android version 4.4 on 2013-12-09
In WebView on iOS version 3.2 on 2010-04-03