Re: Some questions about the in CORS filter

[Benson Margulies]

I translate Anne's answer just now as follows:

To return information to the client, it has to be 2xx. So in the
success case, it has to be 2xx. If it fails, we can do whatever we
prefer: 2xx and no CORS headers or 4xx. I'm with you on a 4xx.