Add Vary header when allowedOrigins is * (#114)

gorilla · Apr 16, 2018 · 9327cfd · 9327cfd
1 parent c5874fa
commit 9327cfd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/cors.go b/cors.go
@@ -106,7 +106,7 @@ func (ch *cors) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 		w.Header().Set(corsAllowCredentialsHeader, "true")
 	}
 
-	if len(ch.allowedOrigins) > 1 {
+	if len(ch.allowedOrigins) > 1 || ch.allowedOrigins[0] == corsOriginMatchAll {
 		w.Header().Set(corsVaryHeader, corsOriginHeader)
 	}