This is documentation about a configuration directive, which can be placed within Movable Type’s core configuration file,
mt-config.cgi, to customize the behavior of the system.
DataAPICORSAllowMethods is used to specify the Access-Control-Allow-Methods response value sent back from the Data API endpoint.
In order to determine what methods a client application is allowed to use to make requests from the Data API, a preflight request can be sent to the server where the Data API is operating. If the request is made from a site that is permitted to use the Data API, the method names that can be used are placed in the Access-Control-Allow-Methods header attribute and returned as part of the REST query response.
DataAPICorsAllowMethods GET, POST, OPTIONS, *
* (Asterisk, meaning “all”)