https://issues.apache.org/bugzilla/show_bug.cgi?id=51223

--- Comment #1 from Mark Nottingham <[email protected]> ---
CORS doesn't require those headers on a 304, and indeed browsers work without
them present on it. This is because many 304s are generated from intermediary
caches that can't be updated to know about CORS.

Recommend INVALID.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to