diff --git a/openerp/http.py b/openerp/http.py
index 35cf8f39a7c..717582e2ec5 100644
--- a/openerp/http.py
+++ b/openerp/http.py
@@ -960,8 +960,12 @@ class Root(object):
         # Support for Cross-Origin Resource Sharing
         if request.func.cors:
             response.headers.set('Access-Control-Allow-Origin', request.func.cors)
-            if request.func.methods:
-                response.headers.set('Access-Control-Allow-Methods', ','.join(request.func.methods))
+            methods = 'GET, POST'
+            if request.func_request_type == 'json':
+                methods = 'POST'
+            elif request.func.methods:
+                methods = ', '.join(request.func.methods)
+            response.headers.set('Access-Control-Allow-Methods', methods)
 
         return response