Get WordPress

WordPress Developer Resources

get_allowed_http_origins()

get_allowed_http_origins(): string[]

In this article

Back to top

Retrieves list of allowed HTTP origins.

Return

string[] Array of origin URLs.

Source

function get_allowed_http_origins() {
	$admin_origin = parse_url( admin_url() );
	$home_origin  = parse_url( home_url() );

	// @todo Preserve port?
	$allowed_origins = array_unique(
		array(
			'http://' . $admin_origin['host'],
			'https://' . $admin_origin['host'],
			'http://' . $home_origin['host'],
			'https://' . $home_origin['host'],
		)
	);

	/**
	 * Changes the origin types allowed for HTTP requests.
	 *
	 * @since 3.4.0
	 *
	 * @param string[] $allowed_origins Array of allowed HTTP origins.
	 */
	return apply_filters( 'allowed_http_origins', $allowed_origins );
}

View all references View on Trac View on GitHub

Hooks

apply_filters( ‘allowed_http_origins’, string[] $allowed_origins )

Changes the origin types allowed for HTTP requests.

UsesDescription
admin_url()wp-includes/link-template.php

Retrieves the URL to the admin area for the current site.

home_url()wp-includes/link-template.php

Retrieves the URL for the current site where the front end is accessible.

apply_filters()wp-includes/plugin.php

Calls the callback functions that have been added to a filter hook.

Show 1 moreShow less
Used byDescription
is_allowed_http_origin()wp-includes/http.php

Determines if the HTTP origin is an authorized one.

Changelog

VersionDescription
3.4.0Introduced.

User Contributed Notes

You must log in before being able to contribute a note or feedback.