hapijs/hapi — pull request #1932 by kanongil (2014-09-11 09:26:22+00:00)
Title: handle empty CORS expose-headers header response

The `access-control-expose-headers` should only be included in the response for non-empty lists according to http://www.w3.org/TR/cors/#resource-requests.

This patch fixes the response on servers configured with `{ cors: { exposedHeaders: [] } }`.