Title: allowed_http_request_hosts
Published: April 25, 2014
Last modified: February 24, 2026

---

# allowed_http_request_hosts( bool $is_external, string $host ): bool

## In this article

 * [Description](https://developer.wordpress.org/reference/functions/allowed_http_request_hosts/?output_format=md#description)
 * [Parameters](https://developer.wordpress.org/reference/functions/allowed_http_request_hosts/?output_format=md#parameters)
 * [Return](https://developer.wordpress.org/reference/functions/allowed_http_request_hosts/?output_format=md#return)
 * [Source](https://developer.wordpress.org/reference/functions/allowed_http_request_hosts/?output_format=md#source)
 * [Related](https://developer.wordpress.org/reference/functions/allowed_http_request_hosts/?output_format=md#related)
 * [Changelog](https://developer.wordpress.org/reference/functions/allowed_http_request_hosts/?output_format=md#changelog)

[ Back to top](https://developer.wordpress.org/reference/functions/allowed_http_request_hosts/?output_format=md#wp--skip-link--target)

Marks allowed redirect hosts safe for HTTP requests as well.

## 󠀁[Description](https://developer.wordpress.org/reference/functions/allowed_http_request_hosts/?output_format=md#description)󠁿

Attached to the [‘http_request_host_is_external’](https://developer.wordpress.org/reference/hooks/http_request_host_is_external/)
filter.

## 󠀁[Parameters](https://developer.wordpress.org/reference/functions/allowed_http_request_hosts/?output_format=md#parameters)󠁿

 `$is_external`boolrequired

`$host`stringrequired

## 󠀁[Return](https://developer.wordpress.org/reference/functions/allowed_http_request_hosts/?output_format=md#return)󠁿

 bool

## 󠀁[Source](https://developer.wordpress.org/reference/functions/allowed_http_request_hosts/?output_format=md#source)󠁿

    ```php
    function allowed_http_request_hosts( $is_external, $host ) {
    	if ( ! $is_external && wp_validate_redirect( 'http://' . $host ) ) {
    		$is_external = true;
    	}
    	return $is_external;
    }
    ```

[View all references](https://developer.wordpress.org/reference/files/wp-includes/http.php/)
[View on Trac](https://core.trac.wordpress.org/browser/tags/6.9.4/src/wp-includes/http.php#L666)
[View on GitHub](https://github.com/WordPress/wordpress-develop/blob/6.9.4/src/wp-includes/http.php#L666-L671)

## 󠀁[Related](https://developer.wordpress.org/reference/functions/allowed_http_request_hosts/?output_format=md#related)󠁿

| Uses | Description | 
| [wp_validate_redirect()](https://developer.wordpress.org/reference/functions/wp_validate_redirect/)`wp-includes/pluggable.php` |

Validates a URL for use in a redirect.

  |

## 󠀁[Changelog](https://developer.wordpress.org/reference/functions/allowed_http_request_hosts/?output_format=md#changelog)󠁿

| Version | Description | 
| [3.6.0](https://developer.wordpress.org/reference/since/3.6.0/) | Introduced. |

## User Contributed Notes

You must [log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fdeveloper.wordpress.org%2Freference%2Ffunctions%2Fallowed_http_request_hosts%2F)
before being able to contribute a note or feedback.