chore: only set Access-Control-Allow-Credentials when it’s true (#41

)
flamego · Aug 20, 2023 · f568113 · f568113
1 parent 12a4662
commit f568113
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/cors.go b/cors.go
@@ -110,8 +110,11 @@ func CORS(options ...Options) flamego.Handler {
 				u.Scheme = opt.Scheme
 			}
 			headers["Access-Control-Allow-Origin"] = u.String()
-			headers["Access-Control-Allow-Credentials"] = strconv.FormatBool(opt.AllowCredentials)
 			headers["Vary"] = "Origin"
+
+			if opt.AllowCredentials {
+				headers["Access-Control-Allow-Credentials"] = "true"
+			}
 		}
 
 		ctx.ResponseWriter().Before(func(w flamego.ResponseWriter) {