Automattic/engine.io — pull request #282 by akamensky (2014-09-13 05:17:14+00:00)
Title: Fix for #281

Send 403 Forbidden instead of 400 Bad Request as more logical response code

Not set CORS headers when origin in fact is not allowed to access