WordPress.org

The Allow-Origin API, added in WordPress 3.4, allows developers to control delivery of Access-Control-Allow-Origin headers from their plugins and themes.

Function Reference

• get_http_origin(): Get the HTTP Origin of the current request.
• get_allowed_http_origins(): Retrieve list of allowed http origins.
• is_allowed_http_origin(): Determines if the http origin is an authorized one.
• send_origin_headers(): Send Access-Control-Allow-Origin and related headers if the current request is from an allowed origin.