wp/wp-includes/rest-api.php
changeset 13 d255fe9cd479
parent 9 177826044cd9
child 16 a86126ab1dd4
equal deleted inserted replaced
12:d8a8807227e4 13:d255fe9cd479
   585 			$origin = esc_url_raw( $origin );
   585 			$origin = esc_url_raw( $origin );
   586 		}
   586 		}
   587 		header( 'Access-Control-Allow-Origin: ' . $origin );
   587 		header( 'Access-Control-Allow-Origin: ' . $origin );
   588 		header( 'Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, PATCH, DELETE' );
   588 		header( 'Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, PATCH, DELETE' );
   589 		header( 'Access-Control-Allow-Credentials: true' );
   589 		header( 'Access-Control-Allow-Credentials: true' );
       
   590 		header( 'Vary: Origin', false );
       
   591 	} elseif ( ! headers_sent() && 'GET' === $_SERVER['REQUEST_METHOD'] && ! is_user_logged_in() ) {
   590 		header( 'Vary: Origin' );
   592 		header( 'Vary: Origin' );
   591 	}
   593 	}
   592 
   594 
   593 	return $value;
   595 	return $value;
   594 }
   596 }