DEV Community

Discussion on: Understanding CORS

Collapse
 
malvoz profile image
Robert Linder

In the "Allowing multiple origins" example, Vary: Origin should be set in the response to avoid incorrect content being served (if content may differ depending on the requesting origin). See fetch.spec.whatwg.org/#cors-protoc...

Collapse
 
g33konaut profile image
Martin Splitt

Good point, thanks for your input! Added it to the example in that section :)