Harald Pehl created WFCORE-1672: ----------------------------------- Summary: Add 'Vary: Origin' header to CorsHttpHandler Key: WFCORE-1672 URL: https://issues.jboss.org/browse/WFCORE-1672 Project: WildFly Core Issue Type: Enhancement Components: Domain Management Reporter: Harald Pehl Assignee: Harald Pehl The management endpoint can be accessed from a list of allowed origins. In that case CORS relevant headers such as {{Access-Control-Allow-Origin: <allowed origin>}} are added to response. Since the list of allowed origins is dynamic, the header {{Vary: Origin}} should be added as well. See [https://www.w3.org/TR/cors/#resource-implementation]. -- This message was sent by Atlassian JIRA (v6.4.11#64026)