Manual:$wgAllowedCorsHeaders
Jump to navigation
Jump to search
API: $wgAllowedCorsHeaders | |
---|---|
List of allowed headers for cross-origin API requests. |
|
Introduced in version: | 1.35.0 (Gerrit change 585491; git #0ed077d3) |
Removed in version: | still in use |
Allowed values: | (array) |
Default value: | (see below) |
Other settings: Alphabetical | By function |
Default value[edit]
MediaWiki version: | ≥ 1.36 Gerrit change 646768 |
$wgAllowedCorsHeaders = [
/* simple headers (see spec) */
'Accept',
'Accept-Language',
'Content-Language',
'Content-Type',
/* non-authorable headers in XHR, which are however requested by some UAs */
'Accept-Encoding',
'DNT',
'Origin',
/* MediaWiki whitelist */
'User-Agent',
'Api-User-Agent',
/* Allowing caching preflight requests, see T269636 */
'Access-Control-Max-Age',
];
MediaWiki version: | 1.35 |
$wgAllowedCorsHeaders = [
/* simple headers (see spec) */
'Accept',
'Accept-Language',
'Content-Language',
'Content-Type',
/* non-authorable headers in XHR, which are however requested by some UAs */
'Accept-Encoding',
'DNT',
'Origin',
/* MediaWiki whitelist */
'User-Agent',
'Api-User-Agent',
];