- From: Richard Gibson <notifications@github.com>
- Date: Mon, 20 Aug 2018 07:38:43 -0700
- To: whatwg/fetch <fetch@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
Received on Monday, 20 August 2018 14:39:06 UTC
https://fetch.spec.whatwg.org/commit-snapshots/3ca2ee5968a60883c9e302f296047d539337b6dd/#http-new-header-syntax > For \`Access\-Control\-Expose\-Headers\`, \`Access\-Control\-Allow\-Methods\`, and \`Access\-Control\-Allow\-Headers\` response headers the value \`\*\` counts as a wildcard for requests without credentials\. For such requests there is no way to solely match a header name or method that is \`\*\`\. I believe that, contrary to the quoted text, it is possible to solely match `*` values via repetition. For example: ``` Access-Control-Allow-Headers: *, * ``` -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/whatwg/fetch/issues/798
Received on Monday, 20 August 2018 14:39:06 UTC