search

larskuhtz / wai-cors

A Haskell implementation of Cross-Origin resource sharing (CORS) for Wai
MIT License
26 stars 13 forks source link

corsOrigins creates invalid Access-Control-Allow-Origin header #20

Closed alexanderkjeldaas closed 4 years ago

alexanderkjeldaas commented 6 years ago

Chrome says:

The 'Access-Control-Allow-Origin' header contains multiple values '*, *', but only one is allowed.

If corsOrigins is set, then there will typically be two values for this header. And Chrome barfs and CORS doesn't work.

larskuhtz commented 4 years ago

This seems to be a consequence of using two CORS implementations at the same time, as described in #21. If this is not the case, feel free to reopen the issue.