Merge changes from the private repository (#2226)

## Motivation for the change, related issues

This PR merges the changes from a private Playground fork as [Automattic
is resuming WordPress
contributions](https://automattic.com/2025/05/29/returning-to-core/).

**Let's merge this PR as is without squashing. These individual commits
carry a lot of context.**

### A summary of changes

Okay, I've merged the changelog entries into a single list and replaced
the private PR links with their corresponding public commit links from
the provided list.

Here's the consolidated list:

- Revert "[ php-wasm ] add Intl support (#150)".
([781d97b](781d97b711))
- Use the new SQLite driver.
([a7c1061](a7c1061ff2))
- [ php-wasm ] Add intl support.
([4382776](4382776eff))
- [ php-wasm ] Intl : Improve integration.
([8a01fac](8a01facea6))
- [ php-wasm ] add Intl support.
([8d11917](8d11917b81))
- [CLI] Enable users to automatically mount their current working
directory into Playground.
([cb670ec](cb670ecbc4))
- [PHP-wasm Node] Fix Identifier '\_\_filename' has already been
declared.
([fc24cb0](fc24cb0b39))
- [Website] Support data URLs in blueprint-url query parameter.
([5a2e706](5a2e706b34))
- Define `DB_NAME` constant when it's missing.
([35f7356](35f735676c))
- Support limiting files added to self-hosted packages.
([ef4144c](ef4144c858))
- Document mounting OPFS storage _after_ the boot.
([9cdb188](9cdb188e1c))
- QUERY_STRING should default to empty string.
([b104159](b104159738))
- Remove null steps that are added.
([cdf6290](cdf62903c8))
- [CLI] Fix package entry point path.
([481ee95](481ee95912))
- Add MySQL network calls to Asyncify tests.
([d613cd6](d613cd6a60))
- Format the plugin-proxy file.
([7bde598](7bde598a95))
- Plugin proxy: Allow all repos from WordPress, Automattic and
Woocommerce organizations.
([0b998b2](0b998b2c1f))
- Remove unused dependencies.
([2a3d28e](2a3d28ee2e))
- [PHP-wasm Node] Add support for resolving wasm paths in Windows.
([8ba3c2c](8ba3c2c3f0))
- [PHP-wasm Node] Dynamically mount symlinks.
([f95d496](f95d4969d7))
- Fix changelog version order.
([a4fca31](a4fca315ec))
- Fix openssl library paths in php-wasm build.
([cb0ea95](cb0ea95105))
- Add private fork links to the changelog.
([811f48b](811f48ba1f))
- Allow public access to A8C Playground instance.
([486032d](486032d388))
- Make php-wasm and Playground CLI's fast to run with Node.js.
([6b09477](6b0947710d))
- Playground CLI: Add `skipSqliteSetup` flag for MySQL support.
([81db60b](81db60b80e))
- Prep the WP update workflows to be re-enabled.
([2bc3fae](2bc3fae6a7))
- Support building for additional remote origins.
([1ce2126](1ce2126ec1))
- Tweak Blueprint test string to match WP 6.8.
([f507a08](f507a08edc))
- Update Nx, Vite, and ESLint dependencies.
([1385984](13859842bd))
- Upgrade octokit to 3.1.2 to fix vulnerability.
([5cc7a3e](5cc7a3e7fc))
- Use Node as the Vitest environment.
([d304149](d3041499c8))
- Fix changelog workflow and backfill changelog entries from recent
versions.
([f003f02](f003f024fe))
- Consider unexpected undefined symbols to be errors.
([fa41a9f](fa41a9f84c))
- Ignore ca-bundle created by @php-wasm/cli.
([f2a3ae8](f2a3ae889e))
- Support Node.js args to built-script executor.
([5a3551d](5a3551dcbd))
- Support quickly testing php-wasm CLI changes with bun.
([fea9e99](fea9e991a0))
- Update Emscripten version to 4.0.5.
([b38db76](b38db76163))
- Update Playground Node version to 20.9.0.
([b150e6e](b150e6e44d))
- Upgrade express to 4.21.2.
([9ff293b](9ff293bba2))
- [PHP-wasm] Use statfs from NODEFS in the Node version.
([716c70c](716c70c27d))
- Blueprint bundles.
([a88b704](a88b704f4e))
- CORS Proxy: fetch() with credentials: "include".
([db243a7](db243a74be))
- Exif support for PHP-wasm.
([db4c4fc](db4c4fc3fc))
- Remove Data Liberation PHP modules.
([a3fe1d0](a3fe1d04a5))
- Stop suppressing 64bit integer PHP warnings as 64bit longs are now
suppoted.
([f5df251](f5df251129))
- [Blueprints] setSiteLanguage fetch translation package URL from
WP.org.
([5593848](55938483a8))
- [Website] Drop the static <link rel="manifest"> tag and generate
one in JavaScript instead.
([ace3224](ace3224198))
- 64bit integer support, drop PHP 7.0 and 7.1 support.
([6e5785b](6e5785b951))
- FS Journal: Handle renaming OPFS files via delete + create (instead of
file.move()).
([cc69f49](cc69f497ff))
- GitHub: Cache node_modules per arch to avoid nx error.
([b0e5ac2](b0e5ac2a91))
- Merge from public Playground repo.
([1acd783](1acd783ee5))
- OPFS site creation: Use the same "is this directory a site?" check as
the site list.
([27c1c39](27c1c39569))
- Stop adding source maps to offline assets list.
([af2a6dd](af2a6dd8e1))
- Support mobile access to private Playground instance.
([75ca755](75ca75572d))
- TLS->HTTP Proxy: Support outbound request body.
([75914a5](75914a5e35))
- TLS: Only use the server_name extension during server hello.
([0f66399](0f66399814))
- Website: Blueprints as PWAs with a dynamic manifest.json file.
([f3fc591](f3fc591c00))
- Website: Preserve the `mode` query arg when opening OPFS site.
([b12dc91](b12dc910a3))
- Fix php-wasm build error for WITH_SOURCEMAPS=yes.
([aa72e45](aa72e45d79))
- Fix php-wasm source map base.
([aa1e086](aa1e086765))
- Fix private website deployment workflow.
([2126101](21261013b1))
- Fix up private website deployment workflow after initial commit.
([1c166d9](1c166d96f3))
- Add WITH_DEBUG option for building php-wasm with DWARF debug info.
([6911327](6911327245))
- Add `janjakes` to GitHub workflows actors.
([8bab3a7](8bab3a7c10))
- Add a dedicated workflow for deploying private playground.
([9eba050](9eba050cc9))
- Add remote data blocks to the allowlist.
([e092d44](e092d448c9))
- Allow ashfame to run self-hosted package release workflow.
([3a258e1](3a258e1e6a))
- Allow deploying custom supported domains for CORS proxy.
([061de93](061de93ab0))
- CORS proxy: Make allowed origins configurable.
([0613543](06135433fe))
- Make further fixes for unreliable end-to-end tests.
([2657952](26579524ce))
- Move DNS polyfills to a PHP extension and add missing constants.
([756ea70](756ea70b8f))
- New playground CLI function interface.
([08d7a8e](08d7a8e3eb))
- Replace some hardcoded refs to playground.wordpress.net web app.
([256f65b](256f65b6b0))
- Restore safety condition for CORS proxy deployment workflow.
([0973e38](0973e3818b))
- Revert "Add the launch browser flag to CLI".
([980bbb1](980bbb1cc6))
- Revert "Support file URL resources in command line environment".
([c0815ce](c0815ce947))
- Schedule private deployment and use private environment.
([e3ec1d9](e3ec1d9dd2))
- Stop assuming CLI stdout is a TTY write stream.
([877321e](877321e3e1))
- Store WordPress site cookies in the browser instead of a custom Cookie
Store.
([172d32e](172d32edcc))
- Support file URL resources in command line environment.
([b6d6ef6](b6d6ef63e7))
- Switch to relative paths in app manifest.
([3fd6bb1](3fd6bb198e))
- Switch to runner with more CPU and RAM.
([eaa6ce9](eaa6ce906e))
- Treat zip files as zip files regardless of file name.
([0140ef3](0140ef3d0f))
- Try more Playwright workers since we have a runner with more
resources.
([5066fc8](5066fc8aee))
- Update private Playground instance to use dedicated CORS proxy.
([45495a2](45495a2787))
- Use rsync instead of scp in website deploy workflow.
([c2cd891](c2cd891808))
- Use specified SQLite version also for PHP < 7.4.
([469a7cc](469a7ccb5a))
- Fix workflow for deploying self-hosted packages.
([8542e79](8542e798cd))
- Add the launch browser flag to CLI.
([7bea6ec](7bea6ecb24))
- [Fix] Zip spec compliance for exported backup file.
([f894b48](f894b48175))
- Add missing node external to Playground CLI.
([36fece7](36fece7699))
- Add self-hosted package publishing.
([732a454](732a454ce1))

Author: adamziel

.eslintignore

@@ -7,7 +7,6 @@ __pycache__
 packages/playground/wordpress-builds/src/wordpress
 packages/playground/wordpress-builds/public
 packages/playground/sync/src/test/wp-*
-packages/playground/data-liberation/tests/fixtures
 packages/php-wasm/node/src/test/__test*
 *.timestamp-1678999213403.mjs
 .local

.eslintrc.json

@@ -74,7 +74,9 @@
 				"@typescript-eslint/no-empty-function": 0,
 				"@typescript-eslint/no-unused-vars": "error",
 				"no-constant-condition": 0,
-				"playground-dev/avoid-wordpress-builds-dependency": "error"
+				"playground-dev/avoid-wordpress-builds-dependency": "error",
+				// Node.js type stripping requires explicit type imports.
+				"@typescript-eslint/consistent-type-imports": "error"
 			}
 		},
 		{

.gitattributes

@@ -12,3 +12,16 @@ packages/playground/remote/src/wordpress linguist-generated=true -diff
 packages/playground/wordpress-builds/src/wordpress linguist-generated=true -diff
 packages/playground/wordpress-builds/src/public linguist-generated=true -diff
 packages/playground/blueprints/public/ linguist-generated=true
+
+# Avoid large non-essential files in release archives
+packages/playground/wordpress-builds/public/**/* export-ignore
+packages/playground/wordpress-builds/src/wordpress/**/*.zip export-ignore
+packages/php-wasm/web/public/php/**/*.wasm export-ignore
+packages/php-wasm/node/**/*.wasm export-ignore
+packages/playground/website/playwright/**/* export-ignore
+**/test/**/* export-ignore
+**/tests/**/* export-ignore
+**/test-fixtures/**/* export-ignore
+#*.so.* export-ignore
+#*.a export-ignore
+packages/playground/website/demos/* export-ignore

.github/actions/prepare-playground/action.yml

@@ -5,7 +5,7 @@ inputs:
         type: string
         required: true
         description: 'Node.js version to use'
-        default: '18'
+        default: '20'
 
 runs:
     using: 'composite'
@@ -24,7 +24,7 @@ runs:
           with:
               # caching node_modules
               path: node_modules
-              key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ hashFiles('package-lock.json') }}
+              key: ${{ runner.os }}-${{ runner.arch }}-build-${{ env.cache-name }}-${{ hashFiles('package-lock.json') }}
               restore-keys: |
                   ${{ runner.os }}-build-${{ env.cache-name }}-
                   ${{ runner.os }}-build-
@@ -39,3 +39,6 @@ runs:
         - name: Set NX_HEAD
           shell: bash
           run: echo "NX_HEAD=$(git rev-parse HEAD)" >> $GITHUB_ENV
+        - name: Reset NX cache
+          shell: bash
+          run: npx nx reset

.github/workflows/build-website.yml

@@ -22,7 +22,8 @@ jobs:
                 github.actor == 'dmsnell' ||
                 github.actor == 'bgrgicak' ||
                 github.actor == 'brandonpayton' ||
-                github.actor == 'zaerl'
+                github.actor == 'zaerl' ||
+                github.actor == 'janjakes'
             )
 
         # Specify runner + deployment step

.github/workflows/ci.yml

@@ -30,31 +30,62 @@ jobs:
             fail-fast: false
             matrix:
                 include:
-                    - name: test-unit-asyncify (1/8)
-                      target: test-node
-                    - name: test-unit-asyncify (2/8)
+                    - name: test-unit-asyncify (1/14)
+                      target: test
+                    - name: test-unit-asyncify (2/14)
                       target: test-php
-                    - name: test-unit-asyncify (3/8)
+                    - name: test-unit-asyncify (3/14)
                       target: test-php-request-handler-files
-                    - name: test-unit-asyncify (4/8)
+                    - name: test-unit-asyncify (4/14)
                       target: test-php-request-handler-requests
-                    - name: test-unit-asyncify (5/8)
-                      target: test-php-asyncify-file-get-contents
-                    - name: test-unit-asyncify (6/8)
-                      target: test-php-asyncify-fopen
-                    - name: test-unit-asyncify (7/8)
-                      target: test-php-asyncify-fsockopen
-                    - name: test-unit-asyncify (8/8)
-                      target: test-php-asyncify-gethostbyname
+                    - name: test-unit-asyncify (5/14)
+                      target: test-php-asyncify-file-get-contents-http
+                    - name: test-unit-asyncify (6/14)
+                      target: test-php-asyncify-file-get-contents-https
+                    - name: test-unit-asyncify (7/14)
+                      target: test-php-asyncify-fopen-http
+                    - name: test-unit-asyncify (8/14)
+                      target: test-php-asyncify-fopen-https
+                    - name: test-unit-asyncify (9/14)
+                      target: test-php-asyncify-fsockopen-http
+                    - name: test-unit-asyncify (10/14)
+                      target: test-php-asyncify-fsockopen-https
+                    - name: test-unit-asyncify (11/14)
+                      target: test-php-asyncify-gethostbyname-http
+                    - name: test-unit-asyncify (12/14)
+                      target: test-php-asyncify-gethostbyname-https
+                    - name: test-unit-asyncify (13/14)
+                      target: test-php-asyncify-mysqli-http
+                    - name: test-unit-asyncify (14/14)
+                      target: test-php-asyncify-mysqli-https
         name: ${{ matrix.name }}
+        services:
+            mysql:
+                image: mysql:5.7
+                env:
+                    MYSQL_DATABASE: test_db
+                    MYSQL_USER: user
+                    MYSQL_PASSWORD: password
+                    MYSQL_ROOT_PASSWORD: rootpassword
+                ports:
+                    - 3306:3306
+                options: >-
+                    --health-cmd="mysqladmin ping --silent"
+                    --health-interval=10s
+                    --health-timeout=5s
+                    --health-retries=3
         steps:
             - uses: actions/checkout@v4
               with:
                   submodules: true
             - uses: ./.github/actions/prepare-playground
               with:
-                  node-version: 22
-            - run: node --expose-gc node_modules/nx/bin/nx affected --target=${{ matrix.target }} --configuration=ci
+                  node-version: 20
+            - run: node --expose-gc node_modules/nx/bin/nx affected --target=${{ matrix.target }}
+              env:
+                  MYSQL_DATABASE: test_db
+                  MYSQL_USER: user
+                  MYSQL_PASSWORD: password
     # Most of these tests pass locally but the process is crashing
     # on the CI runner.
     #
@@ -150,6 +181,75 @@ jobs:
               uses: geekyeggo/delete-artifact@v5
               with:
                   name: playwright-dist
+    test-built-npm-packages:
+        runs-on: ubuntu-latest
+        needs: [lint-and-typecheck]
+        steps:
+            - uses: actions/checkout@v4
+              with:
+                  submodules: true
+            - uses: ./.github/actions/prepare-playground
+            - name: Generate a mock version number (for releasing the packages in a local registry) and store it as a global variable
+              run: |
+                  VERSION=$(date +%s)
+                  PORT=9934
+                  PACKAGE_BASE_URL=http://127.0.0.1:$PORT/$VERSION
+                  echo "VERSION=$VERSION" >> $GITHUB_ENV
+                  echo "PORT=$PORT" >> $GITHUB_ENV
+                  echo "PACKAGE_BASE_URL=$PACKAGE_BASE_URL" >> $GITHUB_ENV
+                  echo "PACKAGE_URL=$PACKAGE_BASE_URL/v$VERSION/@wp-playground-cli-$VERSION.tar.gz" >> $GITHUB_ENV
+                  echo "HOST_PATH=./dist/packages-for-self-hosting/http%3A%2F%2F127.0.0.1%3A$PORT%2F$VERSION" >> $GITHUB_ENV
+            - name: Update package.json versions
+              run: |
+                  VERSION=$(date +%s)
+                  for package in packages/*/*/package.json; do
+                    jq --arg version "$VERSION" '.version = $version' "$package" > "$package.tmp"
+                    mv "$package.tmp" "$package"
+                  done
+            - name: Package repository
+              run: |
+                  npx nx run-many --all --target=package-for-self-hosting -- --hostingBaseUrl="$PACKAGE_BASE_URL"
+            - name: Install Bun
+              uses: oven-sh/setup-bun@v2
+            - name: Start a local node package registry server
+              run: RUNNER_TRACKING_ID="" && (nohup bun ./packages/playground/cli/src/cli.ts server --port=$PORT --mount="$HOST_PATH:/wordpress/$VERSION" --quiet&)
+            - name: Wait for the package server to be ready
+              run: |
+                  for i in {1..60}; do
+                      curl_output=$(curl -v $PACKAGE_URL 2>&1)
+                      if [ $? -eq 0 ]; then
+                          break
+                      fi
+                      sleep 1
+                  done
+            - name: Run integration tests in an ES Modules project
+              run: |
+                  cd packages/playground/test-built-npm-packages/es-modules-and-vitest
+                  jq --arg package_url "$PACKAGE_URL" '.devDependencies["@wp-playground/cli"] = $package_url' package.json > package.json.tmp
+                  mv package.json.tmp package.json
+                  npm install
+                  INSTALLED_VERSION=$(npm ls @wp-playground/cli version --depth=0 | tail -n 2 | head -n 1 | cut -d ' ' -f 2)
+                  if [ "$INSTALLED_VERSION" != "@wp-playground/cli@$VERSION" ]; then
+                    echo "The installed version of @wp-playground/cli is not the same as the expected version."
+                    echo "Expected: $VERSION"
+                    echo "Installed: $INSTALLED_VERSION"
+                    exit 1
+                  fi
+                  npm run test
+            - name: Run integration tests in a CommonJS project
+              run: |
+                  cd packages/playground/test-built-npm-packages/commonjs-and-jest
+                  jq --arg package_url "$PACKAGE_URL" '.devDependencies["@wp-playground/cli"] = $package_url' package.json > package.json.tmp
+                  mv package.json.tmp package.json
+                  npm install
+                  INSTALLED_VERSION=$(npm ls @wp-playground/cli version --depth=0 | tail -n 2 | head -n 1 | cut -d ' ' -f 2)
+                  if [ "$INSTALLED_VERSION" != "@wp-playground/cli@$VERSION" ]; then
+                    echo "The installed version of @wp-playground/cli is not the same as the expected version."
+                    echo "Expected: $VERSION"
+                    echo "Installed: $INSTALLED_VERSION"
+                    exit 1
+                  fi
+                  npm run test
 
     build:
         runs-on: ubuntu-latest
@@ -159,11 +259,21 @@ jobs:
               with:
                   submodules: true
             - uses: ./.github/actions/prepare-playground
-            - run: npx nx affected --target=build --parallel=3 --verbose
+            - run: |
+                  if ADDITIONAL_REMOTE_ORIGINS=invalid-origin npx nx build playground-client; then
+                    echo "The Playground client build should have failed due to an invalid additional origin."
+                    echo "The build does not appear to be applying ADDITIONAL_REMOTE_ORIGINS."
+                    exit 1
+                  fi
+                  npx nx affected --target=build --parallel=3 --verbose
 
     # Deploy documentation job
     deploy_docs:
-        if: github.ref == 'refs/heads/trunk' && github.event_name == 'push'
+        # Only deploy docs when pushing to the WordPress/wordpress-playground repository
+        if: >
+            github.repository == 'WordPress/wordpress-playground' &&
+            github.ref == 'refs/heads/trunk' &&
+            github.event_name == 'push'
         # Add a dependency to the build job
         needs: [test-unit-asyncify, test-e2e, build]
         name: 'Deploy doc site'
@@ -186,8 +296,8 @@ jobs:
                   submodules: true
             - uses: ./.github/actions/prepare-playground
             - run: npm run build:docs
-            - uses: actions/upload-pages-artifact@v3
+            - uses: actions/upload-pages-artifact@v1
               with: { path: dist/docs/build }
             - name: Deploy to GitHub Pages
               id: deployment
-              uses: actions/deploy-pages@v4
+              uses: actions/deploy-pages@v2

.github/workflows/deploy-cors-proxy.yml

@@ -19,13 +19,14 @@ jobs:
                 github.actor == 'bgrgicak' ||
                 github.actor == 'brandonpayton' ||
                 github.actor == 'zaerl' ||
-                github.actor == 'akirk'
+                github.actor == 'akirk' ||
+                github.actor == 'janjakes'
             )
 
         # Specify runner + deployment step
         runs-on: ubuntu-latest
         environment:
-            name: playground-wordpress-net-wp-cloud
+            name: cors-proxy-wp-cloud
         steps:
             - uses: actions/checkout@v4
               with:
@@ -42,26 +43,54 @@ jobs:
 
             - name: Deploy to CORS proxy server
               shell: bash
-              # TODO: Use completely separate environments for website and CORS proxy deployments
+              env:
+                  CUSTOM_SUPPORTED_ORIGINS_SPACE_SEPARATED: ${{ secrets.CUSTOM_SUPPORTED_ORIGINS_SPACE_SEPARATED }}
               run: |
                   mkdir -p ~/.ssh
-                  echo "${{ secrets.DEPLOY_WEBSITE_TARGET_HOST_KEY }}" >> ~/.ssh/known_hosts
-                  echo "${{ secrets.DEPLOY_WEBSITE_PRIVATE_KEY }}" > ~/.ssh/id_ed25519
+                  echo "${{ secrets.DEPLOY_CORS_PROXY_TARGET_HOST_KEY }}" >> ~/.ssh/known_hosts
+                  echo "${{ secrets.DEPLOY_CORS_PROXY_PRIVATE_KEY }}" > ~/.ssh/id_ed25519
                   chmod 0600 ~/.ssh/*
 
                   # CORS proxy files
                   rsync --verbose --archive --compress -e "ssh -i ~/.ssh/id_ed25519" \
                     --exclude 'tests/' --include '*/' --include '*.php' --exclude '*' \
                     --delete --delete-excluded --prune-empty-dirs \
                     packages/playground/php-cors-proxy/ \
-                    ${{ secrets.DEPLOY_CORS_PROXY_TARGET_USER }}@${{ secrets.DEPLOY_WEBSITE_TARGET_HOST }}:'~/updated-proxy-files'
+                    ${{ secrets.DEPLOY_CORS_PROXY_TARGET_USER }}@${{ secrets.DEPLOY_CORS_PROXY_TARGET_HOST }}:'~/updated-proxy-files'
 
                   # Host-specific deployment scripts and server config
                   rsync --verbose --archive --compress -e "ssh -i ~/.ssh/id_ed25519" --delete \
                     packages/playground/php-cors-proxy-deployment/ \
-                    ${{ secrets.DEPLOY_CORS_PROXY_TARGET_USER }}@${{ secrets.DEPLOY_WEBSITE_TARGET_HOST }}:'~/cors-proxy-deployment'
+                    ${{ secrets.DEPLOY_CORS_PROXY_TARGET_USER }}@${{ secrets.DEPLOY_CORS_PROXY_TARGET_HOST }}:'~/cors-proxy-deployment'
 
                   # Apply update
                   ssh -i ~/.ssh/id_ed25519 \
-                    ${{ secrets.DEPLOY_CORS_PROXY_TARGET_USER }}@${{ secrets.DEPLOY_WEBSITE_TARGET_HOST }} \
+                    ${{ secrets.DEPLOY_CORS_PROXY_TARGET_USER }}@${{ secrets.DEPLOY_CORS_PROXY_TARGET_HOST }} \
                     -tt -C '~/cors-proxy-deployment/apply-update.sh'
+
+                  # If configured, support CORS responses for a custom list of origins
+                  if [[ -n "${CUSTOM_SUPPORTED_ORIGINS_SPACE_SEPARATED}" ]]; then
+                    CUSTOM_ORIGINS_PHP="<?php define('PLAYGROUND_CORS_PROXY_SUPPORTED_ORIGINS', array("
+
+                    for origin in $CUSTOM_SUPPORTED_ORIGINS_SPACE_SEPARATED; do
+                      if ! (
+                        [[ $origin =~ ^https?://([a-zA-Z0-9-]+\.)*[a-zA-Z]{2,}$ ]] ||
+                        [[ $origin =~ ^https?://([0-9]{1,3}\.){3}[0-9]{1,3}$ ]] ||
+                        [[ $origin =~ ^https?://^([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}$ ]]
+                      ); then
+                        echo "Unable to use CUSTOM_SUPPORTED_ORIGINS_SPACE_SEPARATED"
+                        echo "Invalid origin: '$origin'"
+                        exit -1;
+                      fi
+
+                      echo "Adding custom supported origin: '$origin'"
+                      CUSTOM_ORIGINS_PHP+="'$origin', "
+                    done
+
+                    CUSTOM_ORIGINS_PHP+='));'
+
+                    echo "$CUSTOM_ORIGINS_PHP" > custom-redirects.php
+                    rsync -avz -e "ssh -i ~/.ssh/id_ed25519" \
+                      custom-redirects.php \
+                      ${{ secrets.DEPLOY_CORS_PROXY_TARGET_USER }}@${{ secrets.DEPLOY_CORS_PROXY_TARGET_HOST }}:'~/htdocs/'
+                  fi