WordPress/wp-includes/rest-api
TimothyBlynJacobs df2b9b1689 REST API: Add Content-Disposition, Content-MD5 and X-WP-Nonce as allowed cors headers.
The Content-Disposition and Content-MD5 headers allow for easier file uploading across domains by using a File/Blob object directly. The X-WP-Nonce header is allowed for making cross-origin and same-origin authenticated requests consistent.

Additionally a filter is introduced, "rest_allowed_cors_headers", to simplify the process of allowing additional request headers.

Props rmccue, TimothyBlynJacobs.
Fixes #41696.

Built from https://develop.svn.wordpress.org/trunk@48452


git-svn-id: http://core.svn.wordpress.org/trunk@48221 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2020-07-12 19:37:12 +00:00
..
endpoints REST API: Sanitize block renderer attributes. 2020-07-11 20:34:05 +00:00
fields Docs: Synchronize and correct documentation for various metadata functions and filters. 2020-07-09 11:26:07 +00:00
search REST API: Use new `rest_get_route_for_post()` in the post search handler. 2020-07-07 15:31:02 +00:00
class-wp-rest-request.php Docs: Remove an empty line between `@param` and `@return` tags, per the documentation standards. 2020-06-20 11:18:09 +00:00
class-wp-rest-response.php Docs: Improve inline comments per the documentation standards. 2020-01-29 00:45:18 +00:00
class-wp-rest-server.php REST API: Add Content-Disposition, Content-MD5 and X-WP-Nonce as allowed cors headers. 2020-07-12 19:37:12 +00:00