Should non-2xx status code responses include CORS specific headers
问题 Should non-2XX status code responses still include CORS specific headers such as Access-Control-Allow-Origin , Access-Control-Allow-Methods , and Access-Control-Max-Age ? Does that even make any sense for clients? For example: ➜ api git:(master) ✗ curl -i http://127.0.0.1:9000/dfas HTTP/1.1 404 Not Found Connection: close Server: Node.js v6.3.1 Cache-Control: no-cache, no-store Access-Control-Max-Age: 300 Access-Control-Allow-Origin: * Content-Type: application/json Content-Length: 60 Date: