Manual:$wgAllowedCorsHeaders

API: $wgAllowedCorsHeaders
クロス オリジン API リクエストで許容されるヘッダーの一覧。
導入されたバージョン:	1.35.0 (Gerrit change 585491; git #0ed077d3)
除去されたバージョン:	使用中
許容される値:	(配列)
既定値:	(下記参照)
その他の設定: アルファベット順 | 機能順

Used in the Access-Control-Allow-Headers response for cross-origin requests coming from a domain that is allowed via $wgCrossSiteAJAXdomains or similar settings.

Will be used by both the REST API and the action API. The REST API will allow some headers that are needed for its functionality, even if they are not listed here.

既定値

MediaWiki バージョン:

≧ 1.40 Gerrit change 921154

This was backported to MediaWiki 1.35.11, 1.38.7 and 1.39.4.

$wgAllowedCorsHeaders = [
	/* simple headers (see spec) */
	'Accept',
	'Accept-Language',
	'Content-Language',
	'Content-Type',
	/* non-authorable headers in XHR, which are however requested by some UAs */
	'Accept-Encoding',
	'DNT',
	'Origin',
	/* MediaWiki whitelist */
	'User-Agent',
	'Api-User-Agent',
	/* Allowing caching preflight requests, see T269636 */
	'Access-Control-Max-Age',
	/* OAuth 2.0, see T322944 */
	'Authorization',
];

MediaWiki バージョン:

1.36 – 1.39 Gerrit change 646768

This was backported to MediaWiki 1.35.11.

$wgAllowedCorsHeaders = [
	/* simple headers (see spec) */
	'Accept',
	'Accept-Language',
	'Content-Language',
	'Content-Type',
	/* non-authorable headers in XHR, which are however requested by some UAs */
	'Accept-Encoding',
	'DNT',
	'Origin',
	/* MediaWiki whitelist */
	'User-Agent',
	'Api-User-Agent',
	/* Allowing caching preflight requests, see T269636 */
	'Access-Control-Max-Age',
];

MediaWiki バージョン:

1.35

$wgAllowedCorsHeaders = [
	/* simple headers (see spec) */
	'Accept',
	'Accept-Language',
	'Content-Language',
	'Content-Type',
	/* non-authorable headers in XHR, which are however requested by some UAs */
	'Accept-Encoding',
	'DNT',
	'Origin',
	/* MediaWiki whitelist */
	'User-Agent',
	'Api-User-Agent',
];