Filter hook 'rest_allowed_cors_headers'

Hook Information

Hook Parameters

Usage Examples

<?php
// Hook into rest_allowed_cors_headers
add_filter('rest_allowed_cors_headers', 'my_custom_filter', 10, 2);

function my_custom_filter($allow_headers, $request) {
    // Your custom filtering logic here
    return $allow_headers;
}

Source Code Context

<?php
 427  		 * @since 6.3.0 The `$request` parameter was added.
 428  		 *
 429  		 * @param string[]        $allow_headers The list of request headers to allow.
 430  		 * @param WP_REST_Request $request       The request in context.
 431  		 */
 432  		$allow_headers = apply_filters( 'rest_allowed_cors_headers', $allow_headers, $request );
 433  
 434  		$this->send_header( 'Access-Control-Allow-Headers', implode( ', ', $allow_headers ) );
 435  
 436  		$result = $this->check_authentication();
 437  

PHP Documentation

<?php
/**
		 * Filters the list of request headers that are allowed for REST API CORS requests.
		 *
		 * The allowed headers are passed to the browser to specify which
		 * headers can be passed to the REST API. By default, we allow the
		 * Content-* headers needed to upload files to the media endpoints.
		 * As well as the Authorization and Nonce headers for allowing authentication.
		 *
		 * @since 5.5.0
		 * @since 6.3.0 The `$request` parameter was added.
		 *
		 * @param string[]        $allow_headers The list of request headers to allow.
		 * @param WP_REST_Request $request       The request in context.
		 */