In the "Allowing multiple origins" example, Vary: Origin should be set in the response to avoid incorrect content being served (if content may differ depending on the requesting origin). See fetch.spec.whatwg.org/#cors-protoc...
Good point, thanks for your input! Added it to the example in that section :)
We're a place where coders share, stay up-to-date and grow their careers.
We strive for transparency and don't collect excess data.