Changeset 46478 for trunk/src/wp-includes/rest-api.php

Timestamp:

10/14/2019 03:41:05 PM (5 years ago)

Author:

whyisjake

Message:

REST API: Send a Vary: Origin header on GET requests.

Add this header on all GET requests to prevent cached requests.

Props darthhexx, davidbinda, nickdaugherty, whyisjake.

File:

• trunk/src/wp-includes/rest-api.php (modified) (1 diff)

trunk/src/wp-includes/rest-api.php

@@ -589 +589 @@
         header( 'Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, PATCH, DELETE' );
         header( 'Access-Control-Allow-Credentials: true' );
+        header( 'Vary: Origin' );
+    } else if ( 'GET' === $_SERVER['REQUEST_METHOD'] && ! is_user_logged_in() ) {
         header( 'Vary: Origin' );
     }