Purpose of empty 'Access-Control-Expose-Headers' header?

cyu / rack-cors

Rack Middleware for handling Cross-Origin Resource Sharing (CORS), which makes cross-origin AJAX possible.

MIT License

3.26k stars 263 forks source link

Open andreas-venturini opened 3 years ago

andreas-venturini commented 3 years ago

I'm curious why the 'Access-Control-Expose-Headers' is not entirely omitted in case expose is nil but set to an empty string?