HTTP
指南：
资源和 URI
HTTP 指南
HTTP 安全
HTTP 访问控制（CORS）
HTTP 认证
HTTP 缓存
HTTP 压缩
HTTP 条件请求
HTTP 内容协商
HTTP cookies
HTTP 范围请求
HTTP 重定向
HTTP 规范
权限策略
参考：
HTTP 头部
1. Accept
2. Accept-CH
3. 非标准已弃用 Accept-CH-Lifetime
4. Accept-Charset
5. Accept-Encoding
6. Accept-Language
7. Accept-Patch
8. Accept-Post
9. Accept-Ranges
10. Access-Control-Allow-Credentials
11. Access-Control-Allow-Headers
12. Access-Control-Allow-Methods
13. Access-Control-Allow-Origin
14. Access-Control-Expose-Headers
15. Access-Control-Max-Age
16. Access-Control-Request-Headers
17. Access-Control-Request-Method
18. Age
19. Allow
20. Alt-Svc
21. Authorization
22. Cache-Control
23. Clear-Site-Data
24. Connection
25. Content-Disposition
26. 非标准已弃用 Content-DPR
27. Content-Encoding
28. Content-Language
29. Content-Length
30. Content-Location
31. Content-Range
32. Content-Security-Policy
33. Content-Security-Policy-Report-Only
34. Content-Type
35. Cookie
36. 实验性 Critical-CH
37. Cross-Origin-Embedder-Policy
38. Cross-Origin-Opener-Policy
39. Cross-Origin-Resource-Policy
40. Date
41. 实验性 Device-Memory
42. Digest
43. 已弃用 DNT
44. 实验性 Downlink
45. 非标准已弃用 DPR
46. 实验性 Early-Data
47. 实验性 ECT
48. ETag
49. Expect
50. Expect-CT
51. Expires
52. Forwarded
53. From
54. Host
55. If-Match
56. If-Modified-Since
57. If-None-Match
58. If-Range
59. If-Unmodified-Since
60. Keep-Alive
61. 非标准已弃用 Large-Allocation
62. Last-Modified
63. 实验性 Link
64. Location
65. Max-Forwards
66. 实验性 NEL
67. Origin
68. Permissions-Policy
69. 已弃用 Pragma
70. Proxy-Authenticate
71. Proxy-Authorization
72. Range
73. Referer
74. Referrer-Policy
75. Retry-After
76. 实验性 RTT
77. 实验性 Save-Data
78. 实验性 Sec-CH-Prefers-Reduced-Motion
79. 实验性 Sec-CH-UA
80. 实验性 Sec-CH-UA-Arch
81. 实验性 Sec-CH-UA-Bitness
82. 已弃用 Sec-CH-UA-Full-Version
83. 实验性 Sec-CH-UA-Full-Version-List
84. 实验性 Sec-CH-UA-Mobile
85. 实验性 Sec-CH-UA-Model
86. 实验性 Sec-CH-UA-Platform
87. 实验性 Sec-CH-UA-Platform-Version
88. Sec-Fetch-Dest
89. Sec-Fetch-Mode
90. Sec-Fetch-Site
91. Sec-Fetch-User
92. 实验性非标准 Sec-GPC
93. Sec-WebSocket-Accept
94. Server
95. Server-Timing
96. Service-Worker-Navigation-Preload
97. Set-Cookie
98. SourceMap
99. Strict-Transport-Security
100. TE
101. Timing-Allow-Origin
102. 已弃用 Tk
103. Trailer
104. Transfer-Encoding
105. Upgrade
106. Upgrade-Insecure-Requests
107. User-Agent
108. Vary
109. Via
110. 非标准已弃用 Viewport-Width
111. Want-Digest
112. 已弃用 Warning
113. 非标准已弃用 Width
114. WWW-Authenticate
115. X-Content-Type-Options
116. 非标准 X-DNS-Prefetch-Control
117. 非标准 X-Forwarded-For
118. 非标准 X-Forwarded-Host
119. 非标准 X-Forwarded-Proto
120. X-Frame-Options
121. 非标准 X-XSS-Protection
HTTP 请求方法
HTTP 响应状态码
1. 100 Continue
2. 101 Switching Protocols
3. 实验性 103 Early Hints
4. 200 OK
5. 201 Created
6. 202 Accepted
7. 203 Non-Authoritative Information
8. 204 No Content
9. 205 Reset Content
10. 206 Partial Content
11. 300 Multiple Choices
12. 301 Moved Permanently
13. 302 Found
14. 303 See Other
15. 304 Not Modified
16. 307 Temporary Redirect
17. 308 Permanent Redirect
18. 400 Bad Request
19. 401 Unauthorized
20. 402 Payment Required
21. 403 Forbidden
22. 404 Not Found
23. 405 Method Not Allowed
24. 406 Not Acceptable
25. 407 Proxy Authentication Required
26. 408 Request Timeout
27. 409 Conflict
28. 410 Gone
29. 411 Length Required
30. 412 Precondition Failed
31. 413 Payload Too Large
32. 414 URI Too Long
33. 415 Unsupported Media Type
34. 416 Range Not Satisfiable
35. 417 Expectation Failed
36. 418 I'm a teapot
37. 422 Unprocessable Entity
38. 425 Too Early
39. 426 Upgrade Required
40. 428 Precondition Required
41. 429 Too Many Requests
42. 431 Request Header Fields Too Large
43. 451 Unavailable For Legal Reasons
44. 500 Internal Server Error
45. 501 Not Implemented
46. 502 Bad Gateway
47. 503 Service Unavailable
48. 504 Gateway Timeout
49. 505 HTTP Version Not Supported
50. 506 Variant Also Negotiates
51. 507 Insufficient Storage
52. 508 Loop Detected
53. 510 Not Extended
54. 511 Network Authentication Required
CSP 指令
1. CSP source values
2. CSP: base-uri
3. 已弃用 CSP: block-all-mixed-content
4. CSP: child-src
5. CSP: connect-src
6. CSP: default-src
7. CSP: font-src
8. CSP: form-action
9. CSP: frame-ancestors
10. CSP: frame-src
11. CSP: img-src
12. CSP: manifest-src
13. CSP: media-src
14. CSP: object-src
15. 非标准已弃用 CSP: plugin-types
16. 实验性 CSP: prefetch-src
17. 非标准已弃用 CSP: referrer
18. CSP: report-to
19. 已弃用 CSP: report-uri
20. 实验性 CSP: require-trusted-types-for
21. CSP: sandbox
22. CSP: script-src
23. CSP: script-src-attr
24. CSP: script-src-elem
25. CSP: style-src
26. CSP: style-src-attr
27. CSP: style-src-elem
28. 实验性 CSP: trusted-types
29. CSP: upgrade-insecure-requests
30. CSP: worker-src
CORS 错误
Permissions-Policy 指令

418 I'm a teapot

状态

规范

浏览器兼容性

请参见参考