HTTPException instances caught fail to preserve important response headers. about webcore HOT 1 CLOSED

HTTP exceptions are caught and utilized as if they were a value returned by the endpoint, ultimately applied to the context by the BaseExtension registered render_response view, as HTTPException objects are themselves Response instances, WSGI applications. 2840daf now transfers a subset of headers from the existing cooperatively-populated Response instance:

• Any header starting with:
  • Access-
  • Cross-
  • Content-
  • X-
• Any header containing Origin.
• Any of the following explicit inclusions:
  • Allow
  • Server
  • Strict-Transport-Security
  • Upgrade-Insecure-Requests
  • Set-Cookie

from webcore.