Brian Clozel 2a39081819 Add Vary:Origin HTTP header in SockJS responses ...

This change adds a "Vary: Origin" HTTP response header for /info and
/iframe SockJS endpoints.
This is preventing proxies and browsers from caching a response and
reusing it for an invalid Origin.

Reference: https://groups.google.com/forum/#!topic/sockjs/svsLWRorSis

Issue: SPR-12310

2014-10-08 16:37:50 +02:00

..

src

Add Vary:Origin HTTP header in SockJS responses

2014-10-08 16:37:50 +02:00