get_allowed_http_origins(): string[]

Return

string[]

Array of origin URLs.

Hooks fired · 1

One hook fires while get_allowed_http_origins() runs, in this order:

1. 1
   apply_filters( allowed_http_origins )filterline 469 (+21 into the body)

   Changes the origin types allowed for HTTP requests.

Uses · 3

• admin_url()Retrieves the URL to the admin area for the current site.
• home_url()Retrieves the URL for the current site where the front end is accessible.
• apply_filters()Calls the callback functions that have been added to a filter hook.

Used by · 1

• is_allowed_http_origin()Determines if the HTTP origin is an authorized one.

Source

View on Trac ↗View on GitHub ↗

448function get_allowed_http_origins() {449	$admin_origin = parse_url( admin_url() );450	$home_origin  = parse_url( home_url() );451 452	// @todo Preserve port?453	$allowed_origins = array_unique(454		array(455			'http://' . $admin_origin['host'],456			'https://' . $admin_origin['host'],457			'http://' . $home_origin['host'],458			'https://' . $home_origin['host'],459		)460	);461 462	/**463	 * Changes the origin types allowed for HTTP requests.464	 *465	 * @since 3.4.0466	 *467	 * @param string[] $allowed_origins Array of allowed HTTP origins.468	 */469	return apply_filters( 'allowed_http_origins', $allowed_origins );470}

History

Introduced in 3.4.0. Unchanged from 6.7.7 through 7.1.0.

1. 6.7.7
2. 6.8.8
3. 6.9.7
4. 7.0.4
5. 7.1.0

Signature, return type and hooks compared across 5 parsed releases.

About this page

Parsed data

Generated from the wordpress-develop 7.0.4 tag, from src/wp-includes/http.php, and regenerated for each WordPress release so it tracks the code rather than a snapshot of it.

Corrections

Something wrong on this page? Report it and it gets fixed in the next regeneration.