HTTP
指南：
资源和 URI
HTTP 指南
HTTP 安全
HTTP 访问控制（CORS）
HTTP 认证
HTTP 缓存
HTTP 压缩
HTTP 条件请求
HTTP 内容协商
HTTP cookie
HTTP 范围请求
HTTP 重定向
HTTP 规范
权限策略
参考：
HTTP 标头
1. Accept
2. Accept-CH
3. Accept-CH-Lifetime 非标准已弃用
4. Accept-Charset
5. Accept-Encoding
6. Accept-Language
7. Accept-Patch
8. Accept-Post
9. Accept-Ranges
10. Access-Control-Allow-Credentials
11. Access-Control-Allow-Headers
12. Access-Control-Allow-Methods
13. Access-Control-Allow-Origin
14. Access-Control-Expose-Headers
15. Access-Control-Max-Age
16. Access-Control-Request-Headers
17. Access-Control-Request-Method
18. Age
19. Allow
20. Alt-Svc
21. Authorization
22. Cache-Control
23. Clear-Site-Data
24. Connection
25. Content-Disposition
26. Content-DPR 非标准已弃用
27. Content-Encoding
28. Content-Language
29. Content-Length
30. Content-Location
31. Content-Range
32. Content-Security-Policy
33. Content-Security-Policy-Report-Only
34. Content-Type
35. Cookie
36. Critical-CH 实验性
37. Cross-Origin-Embedder-Policy
38. Cross-Origin-Opener-Policy
39. Cross-Origin-Resource-Policy
40. Date
41. Device-Memory 实验性
42. Digest 已弃用
43. DNT 已弃用
44. Downlink 实验性
45. DPR 非标准已弃用
46. Early-Data 实验性
47. ECT 实验性
48. ETag
49. Expect
50. Expect-CT
51. Expires
52. Forwarded
53. From
54. Host
55. If-Match
56. If-Modified-Since
57. If-None-Match
58. If-Range
59. If-Unmodified-Since
60. Keep-Alive
61. Large-Allocation 非标准已弃用
62. Last-Modified
63. Link
64. Location
65. Max-Forwards
66. NEL 实验性
67. Origin
68. Permissions-Policy
69. Pragma 已弃用
70. Proxy-Authenticate
71. Proxy-Authorization
72. Range
73. Referer
74. Referrer-Policy
75. Retry-After
76. RTT 实验性
77. Save-Data 实验性
78. Sec-CH-Prefers-Reduced-Motion 实验性
79. Sec-CH-UA 实验性
80. Sec-CH-UA-Arch 实验性
81. Sec-CH-UA-Bitness 实验性
82. Sec-CH-UA-Full-Version 已弃用
83. Sec-CH-UA-Full-Version-List 实验性
84. Sec-CH-UA-Mobile 实验性
85. Sec-CH-UA-Model 实验性
86. Sec-CH-UA-Platform 实验性
87. Sec-CH-UA-Platform-Version 实验性
88. Sec-Fetch-Dest
89. Sec-Fetch-Mode
90. Sec-Fetch-Site
91. Sec-Fetch-User
92. Sec-GPC 实验性
93. Sec-WebSocket-Accept
94. Server
95. Server-Timing
96. Service-Worker-Navigation-Preload
97. Set-Cookie
98. SourceMap
99. Strict-Transport-Security
100. TE
101. Timing-Allow-Origin
102. Tk 已弃用
103. Trailer
104. Transfer-Encoding
105. Upgrade
106. Upgrade-Insecure-Requests
107. User-Agent
108. Vary
109. Via
110. Viewport-Width 非标准已弃用
111. Want-Digest 已弃用
112. Warning 已弃用
113. Width 非标准已弃用
114. WWW-Authenticate
115. X-Content-Type-Options
116. X-DNS-Prefetch-Control 非标准
117. X-Forwarded-For 非标准
118. X-Forwarded-Host 非标准
119. X-Forwarded-Proto 非标准
120. X-Frame-Options
121. X-XSS-Protection 非标准
HTTP 请求方法
HTTP 响应状态码
CSP 指令
CORS 错误
1. Reason: CORS disabled
2. Reason: CORS header 'Access-Control-Allow-Origin' does not match 'xyz'
3. Reason: CORS header 'Access-Control-Allow-Origin' missing
4. Reason: CORS header 'Origin' cannot be added
5. Reason: CORS preflight channel did not succeed
6. Reason: CORS request did not succeed
7. Reason: CORS request external redirect not allowed
8. Reason: CORS request not HTTP
9. Reason: Credential is not supported if the CORS header 'Access-Control-Allow-Origin' is '*'
10. Reason: Did not find method in CORS header 'Access-Control-Allow-Methods'
11. Reason: expected 'true' in CORS header 'Access-Control-Allow-Credentials'
12. Reason: invalid token 'xyz' in CORS header 'Access-Control-Allow-Headers'
13. Reason: invalid token 'xyz' in CORS header 'Access-Control-Allow-Methods'
14. Reason: missing token 'xyz' in CORS header 'Access-Control-Allow-Headers' from CORS preflight channel
15. Reason: Multiple CORS header 'Access-Control-Allow-Origin' not allowed
权限策略指令

状态

规范

参见