HTTP
指南：
资源和 URI
HTTP 指南
HTTP 安全
HTTP 访问控制（CORS）
HTTP 认证
HTTP 缓存
HTTP 压缩
HTTP 条件请求
HTTP 内容协商
HTTP cookies
HTTP 范围请求
HTTP 重定向
HTTP 规范
特征策略
参考：
HTTP 头部
HTTP 请求方法
HTTP 响应状态码
CSP 指令
1. CSP source values
2. CSP: base-uri
3. 已弃用 CSP: block-all-mixed-content
4. CSP: child-src
5. CSP: connect-src
6. CSP: default-src
7. CSP: font-src
8. CSP: form-action
9. CSP: frame-ancestors
10. CSP: frame-src
11. CSP: img-src
12. CSP: manifest-src
13. CSP: media-src
14. CSP: object-src
15. 非标准已弃用 CSP: plugin-types
16. 实验性 CSP: prefetch-src
17. 非标准已弃用 CSP: referrer
18. CSP: report-to
19. 已弃用 CSP: report-uri
20. 非标准已弃用 CSP: require-sri-for
21. 实验性 CSP: require-trusted-types-for
22. CSP: sandbox
23. CSP: script-src
24. CSP: script-src-attr
25. CSP: script-src-elem
26. CSP: style-src
27. CSP: style-src-attr
28. CSP: style-src-elem
29. 实验性 CSP: trusted-types
30. CSP: upgrade-insecure-requests
31. CSP: worker-src
CORS 错误
1. Reason: CORS disabled
2. Reason: CORS header 'Access-Control-Allow-Origin' does not match 'xyz'
3. Reason: CORS header 'Access-Control-Allow-Origin' missing
4. Reason: CORS header 'Origin' cannot be added
5. Reason: CORS preflight channel did not succeed
6. Reason: CORS request did not succeed
7. Reason: CORS request external redirect not allowed
8. Reason: CORS request not HTTP
9. Reason: Credential is not supported if the CORS header 'Access-Control-Allow-Origin' is '*'
10. Reason: Did not find method in CORS header 'Access-Control-Allow-Methods'
11. Reason: expected 'true' in CORS header 'Access-Control-Allow-Credentials'
12. Reason: invalid token 'xyz' in CORS header 'Access-Control-Allow-Headers'
13. Reason: invalid token 'xyz' in CORS header 'Access-Control-Allow-Methods'
14. Reason: missing token 'xyz' in CORS header 'Access-Control-Allow-Headers' from CORS preflight channel
15. Reason: Multiple CORS header 'Access-Control-Allow-Origin' not allowed
Feature-Policy 指令

410 Gone

状态

规范

浏览器兼容性

更多可见