Changeset 39044

Timestamp:

10/31/2016 12:33:25 AM (4 years ago)

Author:

pento

Message:

REST API: Allow Content-Type on CORS requests.

This allows POST requests with a wider variety of Content-Type' headers - Content-Type: application/json`, for example.

Props jnylen0.
Fixes #37994.

File:

• trunk/src/wp-includes/rest-api/class-wp-rest-server.php (modified) (1 diff)

trunk/src/wp-includes/rest-api/class-wp-rest-server.php

@@ -241 +241 @@
         $this->send_header( 'X-Content-Type-Options', 'nosniff' );
         $this->send_header( 'Access-Control-Expose-Headers', 'X-WP-Total, X-WP-TotalPages' );
-        $this->send_header( 'Access-Control-Allow-Headers', 'Authorization' );
+        $this->send_header( 'Access-Control-Allow-Headers', 'Authorization, Content-Type' );
 
         /**