Ticket #48309: 48309-5.2.diff

src/wp-includes/rest-api.php

@@ -589 +589 @@
                 header( 'Access-Control-Allow-Credentials: true' );
                 header( 'Vary: Origin', false );
         } elseif ( ! headers_sent() && 'GET' === $_SERVER['REQUEST_METHOD'] && ! is_user_logged_in() ) {
-                header( 'Vary: Origin' );
+                header( 'Vary: Origin', false );
         }
 
         return $value;