Manual:$wgAllowedCorsHeaders

Other languages:
English • ‎Türkçe • ‎中文 • ‎日本語
API: $wgAllowedCorsHeaders
List of allowed headers for cross-origin API requests.
Introduced in version:1.35.0 (Gerrit change 585491; git #0ed077d3)
Removed in version:still in use
Allowed values:(array)
Default value:(see below)

Default valueEdit

MediaWiki version:
1.35
$wgAllowedCorsHeaders = [
	/* simple headers (see spec) */
	'Accept',
	'Accept-Language',
	'Content-Language',
	'Content-Type',
	/* non-authorable headers in XHR, which are however requested by some UAs */
	'Accept-Encoding',
	'DNT',
	'Origin',
	/* MediaWiki whitelist */
	'User-Agent',
	'Api-User-Agent',
];