[jboss-jira] [JBoss JIRA] (WFCORE-1672) Add 'Vary: Origin' header to CorsHttpHandler

[Harald Pehl (JIRA)]

Harald Pehl created WFCORE-1672:
-----------------------------------

             Summary: Add 'Vary: Origin' header to CorsHttpHandler
                 Key: WFCORE-1672
                 URL: https://issues.jboss.org/browse/WFCORE-1672
             Project: WildFly Core
          Issue Type: Enhancement
          Components: Domain Management
            Reporter: Harald Pehl
            Assignee: Harald Pehl


The management endpoint can be accessed from a list of allowed origins. In that case CORS relevant headers such as {{Access-Control-Allow-Origin: <allowed origin>}} are added to response.

Since the list of allowed origins is dynamic, the header {{Vary: Origin}} should be added as well. See [https://www.w3.org/TR/cors/#resource-implementation].



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)