René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Proxy injecting 'Access-Control-Allow-Credentials:' header","articleBody":"The proxy is injecting an `Access-Control-Allow-Credentials: true` header into the response, even if the original server did not return it.\n\nFor example, requesting directly:\n\n``` bash\ncurl -s http://melvincarvalho.com/#me -H 'Accept: text/turtle' -v\n\n\u003c HTTP/1.1 200 OK\n\u003c Access-Control-Allow-Origin : *\n\u003c Content-Length: 7471\n\u003c Content-Type: text/turtle\n```\n\nUsing LDNode's proxy, note the extra header:\n\n``` bash\ncurl \"https://localhost:8443/proxy?uri=http%3A%2F%2Fmelvincarvalho.com%2F%23me\" \\\n    -H 'Accept: text/turtle' -vk\n\n\u003c HTTP/1.1 200 OK\n\u003c X-Powered-By: ldnode\n\u003c Vary: Origin\n\u003c Access-Control-Allow-Credentials: true\n\u003c Access-Control-Expose-Headers: User, Location, Link, Vary, Last-Modified, Content-Length\n```\n","author":{"url":"https://github.com/dmitrizagidulin","@type":"Person","name":"dmitrizagidulin"},"datePublished":"2016-02-17T19:03:14.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":2},"url":"https://github.com/252/node-solid-server/issues/252"}