HTTP
指南：
资源和 URI
HTTP 指南
HTTP 安全
HTTP 访问控制（CORS）
HTTP 认证
HTTP 缓存
HTTP 压缩
HTTP 条件请求
HTTP 内容协商
HTTP cookies
HTTP 范围请求
HTTP 重定向
HTTP 规范
权限策略
参考：
HTTP 头部
1. Accept
2. Accept-CH
3. Accept-CH-Lifetime 非标准已弃用
4. Accept-Charset
5. Accept-Encoding
6. Accept-Language
7. Accept-Patch
8. Accept-Post
9. Accept-Ranges
10. Access-Control-Allow-Credentials
11. Access-Control-Allow-Headers
12. Access-Control-Allow-Methods
13. Access-Control-Allow-Origin
14. Access-Control-Expose-Headers
15. Access-Control-Max-Age
16. Access-Control-Request-Headers
17. Access-Control-Request-Method
18. Age
19. Allow
20. Alt-Svc
21. Authorization
22. Cache-Control
23. Clear-Site-Data
24. Connection
25. Content-Disposition
26. Content-DPR 非标准已弃用
27. Content-Encoding
28. Content-Language
29. Content-Length
30. Content-Location
31. Content-Range
32. Content-Security-Policy
33. Content-Security-Policy-Report-Only
34. Content-Type
35. Cookie
36. Critical-CH 实验性
37. Cross-Origin-Embedder-Policy
38. Cross-Origin-Opener-Policy
39. Cross-Origin-Resource-Policy
40. Date
41. Device-Memory 实验性
42. Digest
43. DNT 已弃用
44. Downlink 实验性
45. DPR 非标准已弃用
46. Early-Data 实验性
47. ECT 实验性
48. ETag
49. Expect
50. Expect-CT
51. Expires
52. Forwarded
53. From
54. Host
55. If-Match
56. If-Modified-Since
57. If-None-Match
58. If-Range
59. If-Unmodified-Since
60. Keep-Alive
61. Large-Allocation 非标准已弃用
62. Last-Modified
63. Link
64. Location
65. Max-Forwards
66. NEL 实验性
67. Origin
68. Permissions-Policy
69. Pragma 已弃用
70. Proxy-Authenticate
71. Proxy-Authorization
72. Range
73. Referer
74. Referrer-Policy
75. Retry-After
76. RTT 实验性
77. Save-Data 实验性
78. Sec-CH-Prefers-Reduced-Motion 实验性
79. Sec-CH-UA 实验性
80. Sec-CH-UA-Arch 实验性
81. Sec-CH-UA-Bitness 实验性
82. Sec-CH-UA-Full-Version 已弃用
83. Sec-CH-UA-Full-Version-List 实验性
84. Sec-CH-UA-Mobile 实验性
85. Sec-CH-UA-Model 实验性
86. Sec-CH-UA-Platform 实验性
87. Sec-CH-UA-Platform-Version 实验性
88. Sec-Fetch-Dest
89. Sec-Fetch-Mode
90. Sec-Fetch-Site
91. Sec-Fetch-User
92. Sec-GPC 实验性非标准
93. Sec-WebSocket-Accept
94. Server
95. Server-Timing
96. Service-Worker-Navigation-Preload
97. Set-Cookie
98. SourceMap
99. Strict-Transport-Security
100. TE
101. Timing-Allow-Origin
102. Tk 已弃用
103. Trailer
104. Transfer-Encoding
105. Upgrade
106. Upgrade-Insecure-Requests
107. User-Agent
108. Vary
109. Via
110. Viewport-Width 非标准已弃用
111. Want-Digest
112. Warning 已弃用
113. Width 非标准已弃用
114. WWW-Authenticate
115. X-Content-Type-Options
116. X-DNS-Prefetch-Control 非标准
117. X-Forwarded-For 非标准
118. X-Forwarded-Host 非标准
119. X-Forwarded-Proto 非标准
120. X-Frame-Options
121. X-XSS-Protection 非标准
HTTP 请求方法
HTTP 响应状态码
CSP 指令
1. CSP source values
2. CSP: base-uri
3. CSP: block-all-mixed-content 已弃用
4. CSP: child-src
5. CSP: connect-src
6. CSP: default-src
7. CSP: font-src
8. CSP: form-action
9. CSP: frame-ancestors
10. CSP: frame-src
11. CSP: img-src
12. CSP: manifest-src
13. CSP: media-src
14. CSP: object-src
15. CSP: plugin-types 非标准已弃用
16. CSP: prefetch-src 实验性
17. CSP: referrer 非标准已弃用
18. CSP: report-to
19. CSP: report-uri 已弃用
20. CSP: require-trusted-types-for 实验性
21. CSP: sandbox
22. CSP: script-src
23. CSP: script-src-attr
24. CSP: script-src-elem
25. CSP: style-src
26. CSP: style-src-attr
27. CSP: style-src-elem
28. CSP: trusted-types 实验性
29. CSP: upgrade-insecure-requests
30. CSP: worker-src
CORS 错误
1. Reason: CORS disabled
2. Reason: CORS header 'Access-Control-Allow-Origin' does not match 'xyz'
3. Reason: CORS header 'Access-Control-Allow-Origin' missing
4. Reason: CORS header 'Origin' cannot be added
5. Reason: CORS preflight channel did not succeed
6. Reason: CORS request did not succeed
7. Reason: CORS request external redirect not allowed
8. Reason: CORS request not HTTP
9. Reason: Credential is not supported if the CORS header 'Access-Control-Allow-Origin' is '*'
10. Reason: Did not find method in CORS header 'Access-Control-Allow-Methods'
11. Reason: expected 'true' in CORS header 'Access-Control-Allow-Credentials'
12. Reason: invalid token 'xyz' in CORS header 'Access-Control-Allow-Headers'
13. Reason: invalid token 'xyz' in CORS header 'Access-Control-Allow-Methods'
14. Reason: missing token 'xyz' in CORS header 'Access-Control-Allow-Headers' from CORS preflight channel
15. Reason: Multiple CORS header 'Access-Control-Allow-Origin' not allowed
Permissions-Policy 指令
1. Permissions-Policy: accelerometer 实验性
2. Permissions-Policy: ambient-light-sensor 实验性
3. Permissions-Policy: autoplay 实验性
4. Permissions-Policy: battery 实验性
5. Permissions-Policy: camera
6. Permissions-Policy: display-capture
7. Permissions-Policy: document-domain 实验性
8. Permissions-Policy: encrypted-media 实验性
9. Permissions-Policy: execution-while-not-rendered 实验性
10. Permissions-Policy: execution-while-out-of-viewport 实验性
11. Permissions-Policy: fullscreen
12. Permissions-Policy: gamepad 实验性
13. Permissions-Policy: geolocation
14. Permissions-Policy: gyroscope 实验性
15. Permissions-Policy: hid 实验性
16. Permissions-Policy: identity-credentials-get 实验性
17. Permissions-Policy: idle-detection 实验性
18. Permissions-Policy: local-fonts 实验性
19. Permissions-Policy: magnetometer 实验性
20. Permissions-Policy: microphone
21. Permissions-Policy: midi 实验性
22. Permissions-Policy: payment 实验性
23. Permissions-Policy: picture-in-picture 实验性
24. Permissions-Policy: publickey-credentials-get 实验性
25. Permissions-Policy: screen-wake-lock 实验性
26. Permissions-Policy: serial 实验性
27. Permissions-Policy: speaker-selection 实验性
28. Permissions-Policy: usb 实验性
29. Permissions-Policy: web-share
30. Permissions-Policy: xr-spatial-tracking 实验性

410 Gone

状态

规范

浏览器兼容性

更多可见