I found go implementation of CORS and it adds on every CORS request following headers:
headers.Add("Vary", "Origin") headers.Add("Var