rest - CORS - When to return `Access-Control-Expose-Headers` -
should access-control-expose-headers
header field returned along entity in response 'actual' request?
or should returned in response cors preflight request?
or both?
according flow chart on following page, answer in response actual request: http://www.html5rocks.com/en/tutorials/cors/#toc-cors-server-flowchart
Comments
Post a Comment