Manual:$wgAllowedCorsHeaders

API: $wgAllowedCorsHeaders
Lista de encabezados permitidos para solicitudes de API de origen cruzado.
Introducido en la versión:	1.35.0 (Gerrit change 585491; git #0ed077d3)
Eliminado en la versión:	aún se usa
Valores permitidos:	(matriz)
Valor predeterminado:	(véase abajo)
Otras configuraciones: Alfabéticamente | Por Función

Used in the Access-Control-Allow-Headers response for cross-origin requests coming from a domain that is allowed via $wgCrossSiteAJAXdomains or similar settings.

Will be used by both the REST API and the action API. The REST API will allow some headers that are needed for its functionality, even if they are not listed here.

Default value

Versión de MediaWiki:

≥ 1.40 Gerrit change 921154

This was backported to MediaWiki 1.35.11, 1.38.7 and 1.39.4.

$wgAllowedCorsHeaders = [
	/* simple headers (see spec) */
	'Accept',
	'Accept-Language',
	'Content-Language',
	'Content-Type',
	/* non-authorable headers in XHR, which are however requested by some UAs */
	'Accept-Encoding',
	'DNT',
	'Origin',
	/* MediaWiki whitelist */
	'User-Agent',
	'Api-User-Agent',
	/* Allowing caching preflight requests, see T269636 */
	'Access-Control-Max-Age',
	/* OAuth 2.0, see T322944 */
	'Authorization',
];

Versiones de MediaWiki:

1.36 – 1.39 Gerrit change 646768

This was backported to MediaWiki 1.35.11.

$wgAllowedCorsHeaders = [
	/* simple headers (see spec) */
	'Accept',
	'Accept-Language',
	'Content-Language',
	'Content-Type',
	/* non-authorable headers in XHR, which are however requested by some UAs */
	'Accept-Encoding',
	'DNT',
	'Origin',
	/* MediaWiki whitelist */
	'User-Agent',
	'Api-User-Agent',
	/* Allowing caching preflight requests, see T269636 */
	'Access-Control-Max-Age',
];

Versión de MediaWiki:

1.35

$wgAllowedCorsHeaders = [
	/* simple headers (see spec) */
	'Accept',
	'Accept-Language',
	'Content-Language',
	'Content-Type',
	/* non-authorable headers in XHR, which are however requested by some UAs */
	'Accept-Encoding',
	'DNT',
	'Origin',
	/* MediaWiki whitelist */
	'User-Agent',
	'Api-User-Agent',
];