WP Manifestindependent plugin directory
manifest / security / rest-api-same-origin

REST API Strict Origin

WordPress plugin to limit the Access-Control-Allow-Origin header to only allowed origins.

by required · github.com/wearerequired/rest-api-same-origin · website

1stars
3.6kcomposer installs
1forks

Install

No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:

wp plugin install https://github.com/wearerequired/rest-api-same-origin/archive/refs/heads/master.zip

Also on Packagist as wearerequired/rest-api-same-origin:

composer require wearerequired/rest-api-same-origin

From the readme

REST API Strict Origin Limits Access-Control-Allow-Origin for REST API access to only allowed origins by isallowedhttporigin(). By default this includes the home and site URLs. Installation If you're using Composer to manage dependencies, you can use the following command to add the plugin to your site:

Read the full README on GitHub →

Releases

TagPublishedAssetDownloads
0.1.0Mar 19, 2026