WP-CORS
My use case is to allow content authors to write help pages in WordPress. This content is fetched and embedded into a single page application hosted on another domain. AJAX requests to this site from another are typically disallowed by the browser’s security model. To permit legitimate uses the requ
My use case is to allow content authors to write help pages in WordPress. This content is fetched and embedded into a single page application hosted on another domain.
AJAX requests to this site from another are typically disallowed by the browser’s security model. To permit legitimate uses the requesting browser may include an Origin header containing its domain. This plugin uses the Origin header to decide whether to allow the request or not. Allowed domains can be specified in the plugin’s Settings page.
A closer look.
This section describes how to install the plugin and get it working.
- 01Upload the uncompressed contents of wp-cors.zip to the /wp-content/plugins/ directory
- 02Activate the plugin through the ‘Plugins’ menu in WordPress
Frequently asked questions.
Why do I need this plugin?
If you want to integrate content from your site to JavaScript applications running on other host domains (or allow other people to) then the CORS standard is a way to allow this.
What is the difference between CORS and JSONP?
CORS is more modern and more secure since it works with the browser’s same-origin policy and XmlHttpRequest objects rather than bypassing them.
Ok I’m sold, where can I read more about CORS?
You can find the CORS spec here: http://www.w3.org/TR/cors/ You can learn more about how to use CORS here: http://www.html5rocks.com/en/tutorials/cors/
How do I control which sites can integrate using CORS?
This plugin’s Settings page allows administrators to specify a comma separated list of allowed domains.
