Re: [whatwg/fetch] Advise `Vary` even for non-CORS-request responses (#564)

jakearchibald commented on this pull request.



>  [[!HTML]]
 [[!HTTP]] [[!HTTP-SEMANTICS]] [[!HTTP-COND]] [[!HTTP-CACHING]] [[!HTTP-AUTH]]
 
-<pre id=example-vary-origin class=example>Vary: Origin</pre>
+<pre id=example-vary-origin class=example>Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method</pre>

Oh, yeah, good point. I guess you don't need `Access-Control-Allow-Credentials` in there as the credentials is part of the cache key.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/564#discussion_r127437603