Title: WP-CORS Author: tstephenson Published: 5 de octubre de 2014 Last modified: 28 de julio de 2023 --- Buscar plugins Este plugin **no se ha probado con las últimas 3 versiones mayores de WordPress**. Puede que ya no tenga soporte ni lo mantenga nadie, o puede que tenga problemas de compatibilidad cuando se usa con las versiones más recientes de WordPress. ![](https://s.w.org/plugins/geopattern-icon/wp-cors.svg) # WP-CORS Por [tstephenson](https://profiles.wordpress.org/tstephenson/) [Descargar](https://downloads.wordpress.org/plugin/wp-cors.0.2.2.zip) * [Detalles](https://es.wordpress.org/plugins/wp-cors/#description) * [Valoraciones](https://es.wordpress.org/plugins/wp-cors/#reviews) * [Instalación](https://es.wordpress.org/plugins/wp-cors/#installation) * [Desarrollo](https://es.wordpress.org/plugins/wp-cors/#developers) [Soporte](https://wordpress.org/support/plugin/wp-cors/) ## Descripción My use case is to allow content authors to write help pages in WordPress. This content is fetched and embedded into a single page application hosted on another domain. AJAX requests to this site from another are typically disallowed by the browser’s security model. To permit legitimate uses the requesting browser may include an Origin header containing its domain. This plugin uses the Origin header to decide whether to allow the request or not. Allowed domains can be specified in the plugin’s Settings page. ## Capturas * [[ * The plugin’s Settings page. ## Instalación This section describes how to install the plugin and get it working. 1. Upload the uncompressed contents of `wp-cors.zip` to the `/wp-content/plugins/` directory 2. Activate the plugin through the ‘Plugins’ menu in WordPress ## FAQ ### Why do I need this plugin? If you want to integrate content from your site to JavaScript applications running on other host domains (or allow other people to) then the CORS standard is a way to allow this. ### What is the difference between CORS and JSONP? CORS is more modern and more secure since it works _with_ the browser’s same-origin policy and XmlHttpRequest objects rather than bypassing them. ### Ok I’m sold, where can I read more about CORS? You can find the CORS spec here: http://www.w3.org/TR/cors/ You can learn more about how to use CORS here: http://www.html5rocks.com/en/tutorials/cors/ ### How do I control which sites can integrate using CORS? This plugin’s Settings page allows administrators to specify a comma separated list of allowed domains. ## Reseñas ![](https://secure.gravatar.com/avatar/50c101f4d9be877802d44713e653b7ee3306990c73a8daa836608bfa2bf2dcba? s=60&d=retro&r=g) ### 󠀁[Doesn’t work](https://wordpress.org/support/topic/doesnt-work-2425/)󠁿 [angeljs](https://profiles.wordpress.org/angeljs/) 28 de mayo de 2020 Doesn’t work at all ![](https://secure.gravatar.com/avatar/fc79b304fae938687630ff147878c33fc258d96d9d2a6da6e0dc2bcad7e002ea? s=60&d=retro&r=g) ### 󠀁[wp cores… allow access to this site using the CORS standard for authorizing cr](https://wordpress.org/support/topic/wp-cores-allow-access-to-this-site-using-the-cors-standard-for-authorizing-cr/)󠁿 [nileshtaylor](https://profiles.wordpress.org/nileshtaylor/) 30 de julio de 2018 its not working for me.. my website yet giving error cores origin error. [ Leer todas las 3 reseñas ](https://wordpress.org/support/plugin/wp-cors/reviews/) ## Colaboradores y desarrolladores «WP-CORS» es un software de código abierto. Las siguientes personas han colaborado con este plugin. Colaboradores * [ tstephenson ](https://profiles.wordpress.org/tstephenson/) [Traduce «WP-CORS» a tu idioma.](https://translate.wordpress.org/projects/wp-plugins/wp-cors) ### ¿Interesado en el desarrollo? [Revisa el código](https://plugins.trac.wordpress.org/browser/wp-cors/) , echa un vistazo al [repositorio SVN](https://plugins.svn.wordpress.org/wp-cors/) o suscríbete al [registro de desarrollo](https://plugins.trac.wordpress.org/log/wp-cors/) por [RSS](https://plugins.trac.wordpress.org/log/wp-cors/?limit=100&mode=stop_on_copy&format=rss). ## Registro de cambios #### 0.2.2 Tested up to WordPress 6.2.2 Prevent cross-site script injection on Settings page( CVE-2022-47606). Note this vulnerability may only be exploited if the user is already logged in with Admin privilege. #### 0.2.1 Tested up to WordPress 4.3 Minor fixes to avoid 404 on (unnecessary) files. #### 0.2.0 Publish on WordPress.org. #### 0.1.1 Stop debugging statements flooding the error log. #### 0.1.0 Initial proof of concept. ## Meta * Versión **0.2.2** * Última actualización **hace 3 años** * Instalaciones activas **1.000+** * Versión de WordPress ** 3.6 o superior ** * Probado hasta **6.2.9** * Idioma * [English (US)](https://wordpress.org/plugins/wp-cors/) * Etiquetas: * [ajax](https://es.wordpress.org/plugins/tags/ajax/)[cors](https://es.wordpress.org/plugins/tags/cors/) [rest](https://es.wordpress.org/plugins/tags/rest/) * [Vista avanzada](https://es.wordpress.org/plugins/wp-cors/advanced/) ## Valoraciones 2.3 de 5 estrellas. * [ 1 valoración de 5 estrellas ](https://wordpress.org/support/plugin/wp-cors/reviews/?filter=5) * [ 0 valoraciones de 4 estrellas ](https://wordpress.org/support/plugin/wp-cors/reviews/?filter=4) * [ 0 valoraciones de 3 estrellas ](https://wordpress.org/support/plugin/wp-cors/reviews/?filter=3) * [ 0 valoraciones de 2 estrellas ](https://wordpress.org/support/plugin/wp-cors/reviews/?filter=2) * [ 2 valoraciones de 1 estrellas ](https://wordpress.org/support/plugin/wp-cors/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/wp-cors/reviews/#new-post) [Ver todas las valoraciones](https://wordpress.org/support/plugin/wp-cors/reviews/) ## Colaboradores * [ tstephenson ](https://profiles.wordpress.org/tstephenson/) ## Soporte ¿Tienes algo que decir? ¿Necesitas ayuda? [Ver el foro de soporte](https://wordpress.org/support/plugin/wp-cors/)