core/tests/Drupal/FunctionalTests/HttpKernel/CorsIntegrationTest.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/core/tests/Drupal/FunctionalTests/HttpKernel/CorsIntegrationTest.php b/core/tests/Drupal/FunctionalTests/HttpKernel/CorsIntegrationTest.php
index d1c3af8..152c656 100644
--- a/core/tests/Drupal/FunctionalTests/HttpKernel/CorsIntegrationTest.php
+++ b/core/tests/Drupal/FunctionalTests/HttpKernel/CorsIntegrationTest.php
@@ -42,7 +42,7 @@ public function testCrossSiteRequest() {
     // Fire off a request without 'Origin' request header.
     $this->drupalGet('/test-page');
     $this->assertSession()->statusCodeEquals(200);
-    $this->assertSession()->responseHeaderEquals('Vary', '');
+    $this->assertSession()->responseHeaderEquals('Vary', 'Origin');
     $this->assertSession()->responseHeaderEquals('X-Drupal-Cache', 'MISS');
     $this->assertNull($this->getSession()->getResponseHeader('Access-Control-Allow-Origin'));