[wp-trac] [WordPress Trac] #41696: Content-Disposition header is blocked by CORS

[WordPress Trac]

#41696: Content-Disposition header is blocked by CORS
--------------------------+---------------------
 Reporter:  rmccue        |       Owner:  (none)
     Type:  defect (bug)  |      Status:  new
 Priority:  low           |   Milestone:  5.5
Component:  REST API      |     Version:  4.7
 Severity:  minor         |  Resolution:
 Keywords:  has-patch     |     Focuses:
--------------------------+---------------------
Changes (by TimothyBlynJacobs):

 * milestone:  Awaiting Review => 5.5


Comment:

 Adding this to 5.5 to accompany #50369. I've added a PR that is the same
 as 41696.diff but without the short array syntax and I've added the `X-WP-
 Nonce` header. Passing the nonce was already possible through the
 `_wpnonce` query parameter, but I think its worthwhile to have parity.
 `wp.apiFetch` also uses the `X-WP-Nonce` header.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/41696#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform