Re: [whatwg/fetch] CORS protocol and HTTP caches (#402)

@yutakahirano the original question is about a response setting the `Access-Control-Allow-Origin: *` header conditionally based upon the presence of the `Origin` header, right? That does not seem like a sensible setup and we should maybe recommend against it in that section, but as I tried to explain before the note that is currently there is about something else.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/402#issuecomment-257544535

Received on Tuesday, 1 November 2016 11:30:34 UTC