From 8ab70208d0aec972101da8d5f24111ff4e644138 Mon Sep 17 00:00:00 2001
From: "Namhyeon, Go" <gnh1201@gmail.com>
Date: Fri, 3 Oct 2025 17:48:25 +0900
Subject: [PATCH] Update WelsonJS.Toolkit/WelsonJS.Launcher/ResourceServer.cs

Co-authored-by: qodo-merge-pro[bot] <151058649+qodo-merge-pro[bot]@users.noreply.github.com>
---
 WelsonJS.Toolkit/WelsonJS.Launcher/ResourceServer.cs | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/WelsonJS.Toolkit/WelsonJS.Launcher/ResourceServer.cs b/WelsonJS.Toolkit/WelsonJS.Launcher/ResourceServer.cs
index 38d3ca1..214675d 100644
--- a/WelsonJS.Toolkit/WelsonJS.Launcher/ResourceServer.cs
+++ b/WelsonJS.Toolkit/WelsonJS.Launcher/ResourceServer.cs
@@ -512,11 +512,11 @@ namespace WelsonJS.Launcher
                 return false;
 
             var respHeaders = context.Response.Headers;
-            respHeaders["Vary"] = "Origin";
 
             if (allowed.Any(a => a == "*"))
             {
                 respHeaders["Access-Control-Allow-Origin"] = "*";
+                respHeaders["Vary"] = "Origin";
                 return true;
             }
 
@@ -524,6 +524,7 @@ namespace WelsonJS.Launcher
             {
                 respHeaders["Access-Control-Allow-Origin"] = origin;
                 respHeaders["Access-Control-Allow-Credentials"] = "true";
+                respHeaders["Vary"] = "Origin";
                 return true;
             }