rest_send_cors_headers( mixed $value ): mixed

793function rest_send_cors_headers( $value ) {794	$origin = get_http_origin();795 796	if ( $origin ) {797		// Requests from file:// and data: URLs send "Origin: null".798		if ( 'null' !== $origin ) {799			$origin = sanitize_url( $origin );800		}801		header( 'Access-Control-Allow-Origin: ' . $origin );802		header( 'Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, PATCH, DELETE' );803		header( 'Access-Control-Allow-Credentials: true' );804		header( 'Vary: Origin', false );805	} elseif ( ! headers_sent() && 'GET' === $_SERVER['REQUEST_METHOD'] && ! is_user_logged_in() ) {806		header( 'Vary: Origin', false );807	}808 809	return $value;810}