WordPress File wp-includes/http.php

send_origin_headers()

Send Access-Control-Allow-Origin and related headers if the current request is from an allowed origin.