nelmio/NelmioCorsBundle — comment on commit fb243ace83c55280d8a7841a0fbaf22a4e947600
File: EventListener/Kernel.php line 116
By stof:

I see an issue here: you are setting the value of the requested Origin header. This will break things if you are allowing several origins to access your API and are caching the responses as they would be cached with the wrong ``Access-Control-Allow-Origin`` header.
Couldn't you use the ``$options['allow_origin']`` value instead ?