[wp-trac] [WordPress Trac] #32126: XML-RPC stopped working with 4.2 in a cross-domain scenario

[WordPress Trac]

#32126: XML-RPC stopped working with 4.2 in a cross-domain scenario
--------------------------+------------------------------
 Reporter:  flymike       |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  XML-RPC       |     Version:  4.2
 Severity:  normal        |  Resolution:
 Keywords:                |     Focuses:
--------------------------+------------------------------

Comment (by dd32):

 Replying to [comment:1 markoheijnen]:
 > Maybe {{{Allow}}} should have been {{{Access-Control-Allow-Methods}}}.

 `Allow: POST` is the correct header to return with a `405` in this case.

 The XML-RPC API has no CORS support, and I'd be surprised if cross-site
 requests from a modern browser worked before the quoted change in r31004,
 as the OPTIONS request would've lacked the required CORS headers.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/32126#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform