# HG changeset patch
# User Julien Cristau <julien.cristau@logilab.fr>
# Date 1406644031 -7200
# Node ID 586d0e5270520e0ec7fa1cf67913717b013b9c6a
# Parent  1245357b3b3e540a4e357151f851950152ad0d94
[web/cors] don't overwrite other Vary headers

Vary is a list of request headers, we shouldn't override others.

diff -r 1245357b3b3e -r 586d0e527052 web/cors.py
--- a/web/cors.py	Tue Jul 15 16:07:59 2014 +0200
+++ b/web/cors.py	Tue Jul 29 16:27:11 2014 +0200
@@ -109,6 +109,6 @@
              '%s != %s' % (host, myhost))
         raise CORSFailed('Host header and hostname do not match')
     # include "Vary: Origin" header (see 6.4)
-    req.set_header('Vary', 'Origin')
+    req.headers_out.addHeader('Vary', 'Origin')
     return origin