Networking broken: CORS

[adamziel]

Setting ?networking=yes no longer works as api.wordpress.org stopped returning the correct CORS headers. To reproduce, go to https://playground.wordpress.net/?php=8.0&wp=6.4&storage=none&networking=yes&url=/wp-admin/plugin-install.php

cc @dd32

[dd32]

This appears to be because of 9f134e0, all requests are being made with a custom request header now which results in all requests having to make CORS preflight requests.

This goes back to #933 (comment)

Also worth noting if the requests go to /index.php instead of / it will pass.

$ curl -IsX OPTIONS https://api.wordpress.org/core/version-check/1.7/ | head -n1
HTTP/1.1 405 Not Allowed
$ curl -IsX OPTIONS https://api.wordpress.org/core/version-check/1.7/index.php | head -n1
HTTP/1.1 200 OK

I've followed up with systems and see about getting OPTIONS preflight requests working.

[adamziel]

Solved in #1010, let's keep discussing the Systems request in #1009