Changeset 48112

Timestamp:

06/20/2020 11:54:32 PM (6 years ago)

Author:

TimothyBlynJacobs

Message:

REST API: Add "Link" to the list of exposed cors headers.

Currently, only the X-WP-Total and X-WP-TotalPages headers are exposed which means that clients have to manually construct the URL to implement pagination instead of using the "prev" and "next" Links.

Additionally, a filter "rest_exposed_cors_headers" is introduced to make it simpler for plugins to expose additional headers.

Props Toro_Unit, ayeshrajans.
Fixes #50369.

File:

• trunk/src/wp-includes/rest-api/class-wp-rest-server.php (modified) (1 diff)

trunk/src/wp-includes/rest-api/class-wp-rest-server.php

@@ -244 +244 @@
                  */
                 $this->send_header( 'X-Content-Type-Options', 'nosniff' );
-                $this->send_header( 'Access-Control-Expose-Headers', 'X-WP-Total, X-WP-TotalPages' );
+                $expose_headers = array( 'X-WP-Total', 'X-WP-TotalPages', 'Link' );
+
+                /**
+                 * Filters the list of response headers that are exposed to CORS requests.
+                 *
+                 * @since 5.5.0
+                 *
+                 * @param string[] $expose_headers The list of headers to expose.
+                 */
+                $expose_headers = apply_filters( 'rest_exposed_cors_headers', $expose_headers );
+
+                $this->send_header( 'Access-Control-Expose-Headers', implode( ', ', $expose_headers ) );
                 $this->send_header( 'Access-Control-Allow-Headers', 'Authorization, Content-Type' );