Changeset 46544

Timestamp:

10/15/2019 03:45:39 PM (6 years ago)

Author:

whyisjake

Message:

REST API: Allow for multiple Vary: Origin headers in GET responses.

Simple fix, we pass false as the second parameter to the header function.

This is something that we added downstream of the 5.2.4 release, but we missed in 5.2/trunk.

Fixes #48309.
Props xknown, whyisjake.

File:

• trunk/src/wp-includes/rest-api.php (modified) (1 diff)

trunk/src/wp-includes/rest-api.php

@@ -589 +589 @@
         header( 'Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, PATCH, DELETE' );
         header( 'Access-Control-Allow-Credentials: true' );
-        header( 'Vary: Origin' );
+        header( 'Vary: Origin', false );
     } elseif ( ! headers_sent() && 'GET' === $_SERVER['REQUEST_METHOD'] && ! is_user_logged_in() ) {
-        header( 'Vary: Origin' );
+        header( 'Vary: Origin', false );
     }