See https://github.com/w3c/web-platform-tests/pull/5070 (XMLHttpRequest/send-redirect-to-cors.htm in web-platform-tests) for tests.
This may need some vetting. I believe that WebKit behavior for each specific HTTP redirect response code has been looked at in the past, and is intentional.
Interestingly, Fetch API call doesn't just drop request body, but sets it to "{}" after redirect
Safari Technical Preview 150 still fail few tests: https://wpt.fyi/results/xhr/send-redirect-to-cors.htm?label=master&label=experimental&aligned&view=subtest&q=send-redirect-to-cors cdumez@apple.com - you fixed quite a lot XHR related bugs recently (updated TP not released yet)? Is this fixed in those? I couldn't find any commit mentioning this test, which was recently committed. Thanks!
<rdar://problem/98459882>