evert0n/koa-cors — pull request #12 by bodokaiser (2014-05-23 18:02:59+00:00)
Title: do not cache value of "*-Allow-Origin" header

Previously we generated e the value of the 'Access-Control-Allow-Origin'
once with the function `defaults.origin`. However we actually intended
to use the `Origin` header of each request for itself.

See test case for more.