rest_allowed_cors_headers filter-hook . WP 5.5.0
Filters the list of request headers that are allowed for CORS requests.
The allowed headers are passed to the browser to specify which headers can be passed to the REST API. By default, we allow the Content-* headers needed to upload files to the media endpoints. As well as the Authorization and Nonce headers for allowing authentication.
Usage
add_filter( 'rest_allowed_cors_headers', 'filter_function_name_4127' ); function filter_function_name_4127( $allow_headers ){ // filter... return $allow_headers; }
- $allow_headers(string[])
- The list of headers to allow.
Changelog
Since 5.5.0 | Introduced. |
Where the hook is called
rest_allowed_cors_headers
wp-includes/rest-api/class-wp-rest-server.php 343
$allow_headers = apply_filters( 'rest_allowed_cors_headers', $allow_headers );