If I produce a more comprehensive whitelist for UMP will CORS follow my lead?
I'm happy with whatever the browser security teams are happy with. Another way to expose more response headers might be to have a special response header whose value indicates which headers can be exposed.
-- Anne van Kesteren http://annevankesteren.nl/
