https://bz.apache.org/bugzilla/show_bug.cgi?id=63938
--- Comment #2 from Michael Osipov <micha...@apache.org> --- (In reply to Mark Thomas from comment #1) > This behaviour is deliberate. The reasoning is in the code comments. Also, > see bug 57724. I do not really understand the argumentation why a real on CORS-request should have these headers returned. Can you please point to the exact comment you refer to? I'd at least expect this to be configurable. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
