diff --git a/actix-cors/src/middleware.rs b/actix-cors/src/middleware.rs index 71aecfbe9..5dc437fba 100644 --- a/actix-cors/src/middleware.rs +++ b/actix-cors/src/middleware.rs @@ -118,12 +118,16 @@ impl CorsMiddleware { if inner.vary_header { let value = match res.headers_mut().get(header::VARY) { Some(hdr) => { - let mut val: Vec = Vec::with_capacity(hdr.len() + 8); + let mut val: Vec = Vec::with_capacity(hdr.len() + 71); val.extend(hdr.as_bytes()); - val.extend(b", Origin"); + val.extend( + b", Origin, Access-Control-Request-Method, Access-Control-Request-Headers", + ); val.try_into().unwrap() } - None => HeaderValue::from_static("Origin"), + None => HeaderValue::from_static( + "Origin, Access-Control-Request-Method, Access-Control-Request-Headers", + ), }; res.headers_mut().insert(header::VARY, value);