Hello I am trying to use XWiki in a CORS fashion, that is, a javascript client calls pages in xwiki. This sometimes works, but I notice sometimes it doesnt. I havent found the reason why it doesnt always work. The error I get when it doesnt is: The 'Access-Control-Allow-Origin' header contains multiple values '*, *', but only one is allowed. Origin 'http://localhost:8081' is therefore not allowed access. The relevant part of that error is about the multiple headers. In Chrome I can see that there are multiple same headers. Is this correct? 1. Access-Control-Allow-Origin: * 2. Access-Control-Allow-Origin: * 3. Cache-Control: no-cache 4. Content-Language: en 5. Content-Length: 765 6. Content-Script-Type: text/javascript 7. Content-Type: text/html; charset=UTF-8 8. Expires: Wed, 31 Dec 1969 23:59:59 GMT 9. Pragma: no-cache 10. Server: Jetty(9.2.3.v20140905) 11. Set-Cookie: JSESSIONID=8wg8mui7mis16hbozquntqg8;Path=/xwiki -- Anton Hughes