WordPress.org

Make WordPress Core

Ticket #38060: 38060.patch

File 38060.patch, 483 bytes (added by procodewp, 4 years ago)

Adds vary: origin header to rest_send_cors_headers()

  • src/wp-includes/rest-api.php

     
    408408                header( 'Access-Control-Allow-Origin: ' . esc_url_raw( $origin ) );
    409409                header( 'Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE' );
    410410                header( 'Access-Control-Allow-Credentials: true' );
     411                header( 'Vary: Origin' );
    411412        }
    412413
    413414        return $value;