Ticket #38546: 38546.diff

src/wp-includes/rest-api.php

@@ -513 +513 @@
 
         if ( $origin ) {
                 header( 'Access-Control-Allow-Origin: ' . esc_url_raw( $origin ) );
-                header( 'Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE' );
+                header( 'Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, PATCH, DELETE' );
                 header( 'Access-Control-Allow-Credentials: true' );
                 header( 'Vary: Origin' );
         }