From 6d6b045b3af0a83a9a4624b6596efc2ffb5d9fa8 Mon Sep 17 00:00:00 2001 From: Rob Ede Date: Sat, 1 Jan 2022 23:05:29 +0000 Subject: [PATCH] add access-control-request-* headers to vary response header --- actix-cors/src/middleware.rs | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/actix-cors/src/middleware.rs b/actix-cors/src/middleware.rs index 71aecfbe9..5dc437fba 100644 --- a/actix-cors/src/middleware.rs +++ b/actix-cors/src/middleware.rs @@ -118,12 +118,16 @@ impl CorsMiddleware { if inner.vary_header { let value = match res.headers_mut().get(header::VARY) { Some(hdr) => { - let mut val: Vec = Vec::with_capacity(hdr.len() + 8); + let mut val: Vec = Vec::with_capacity(hdr.len() + 71); val.extend(hdr.as_bytes()); - val.extend(b", Origin"); + val.extend( + b", Origin, Access-Control-Request-Method, Access-Control-Request-Headers", + ); val.try_into().unwrap() } - None => HeaderValue::from_static("Origin"), + None => HeaderValue::from_static( + "Origin, Access-Control-Request-Method, Access-Control-Request-Headers", + ), }; res.headers_mut().insert(header::VARY, value);