https://bz.apache.org/bugzilla/show_bug.cgi?id=63938
--- Comment #3 from Michael Osipov <micha...@apache.org> --- (In reply to Michael Osipov from comment #2) > (In reply to Mark Thomas from comment #1) > > This behaviour is deliberate. The reasoning is in the code comments. Also, > > see bug 57724. > > I do not really understand the argumentation why a real on CORS-request > should have these headers returned. Can you please point to the exact > comment you refer to? I'd at least expect this to be configurable. I really would like to settle this with the previous comment. I, frankly, would like to understand this and request reconsider for a boolean parameter. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org