Settting "Access-Control-Allow-Origin" header requires setting (or manipualting) the "Vary" header

symphonycms / jit_image_manipulation

Just in Time Image Manipulation for Symphony CMS

http://symphonyextensions.com/extensions/jit_image_manipulation/

Other

25 stars 42 forks source link

Settting "Access-Control-Allow-Origin" header requires setting (or manipualting) the "Vary" header #148

Open michael-e opened 8 years ago

michael-e commented 8 years ago

If the server specifies an origin host rather than "*", then it must also include Origin in the Vary response header to indicate to clients that server responses will differ based on the value of the Origin request header.

— https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS

Sounds reasonable.