HTTP
Guides:
Resources and URIs
HTTP guide
HTTP security
HTTP access control (CORS)
HTTP authentication
HTTP caching
HTTP compression
HTTP conditional requests
HTTP content negotiation
HTTP cookies
HTTP range requests
HTTP redirects
HTTP specifications
Feature policy
References:
HTTP headers
1. Accept
2. Accept-CH
3. 非標準已棄用 Accept-CH-Lifetime
4. Accept-Charset
5. Accept-Encoding
6. Accept-Language
7. Accept-Patch
8. Accept-Post
9. Accept-Ranges
10. Access-Control-Allow-Credentials
11. Access-Control-Allow-Headers
12. Access-Control-Allow-Methods
13. Access-Control-Allow-Origin
14. Access-Control-Expose-Headers
15. Access-Control-Max-Age
16. Access-Control-Request-Headers
17. Access-Control-Request-Method
18. Age
19. Allow
20. Alt-Svc
21. Authorization
22. Cache-Control
23. Clear-Site-Data
24. Connection
25. Content-Disposition
26. 非標準已棄用 Content-DPR
27. Content-Encoding
28. Content-Language
29. Content-Length
30. Content-Location
31. Content-Range
32. Content-Security-Policy
33. Content-Security-Policy-Report-Only
34. Content-Type
35. Cookie
36. Cross-Origin-Embedder-Policy
37. Cross-Origin-Opener-Policy
38. Cross-Origin-Resource-Policy
39. Date
40. 實驗性質 Device-Memory
41. Digest
42. 已棄用 DNT
43. 實驗性質 Downlink
44. 非標準已棄用 DPR
45. 實驗性質 Early-Data
46. 實驗性質 ECT
47. ETag
48. Expect
49. Expect-CT
50. Expires
51. Feature-Policy
52. Forwarded
53. From
54. Host
55. If-Match
56. If-Modified-Since
57. If-None-Match
58. If-Range
59. If-Unmodified-Since
60. Keep-Alive
61. 非標準已棄用 Large-Allocation
62. Last-Modified
63. 實驗性質 Link
64. Location
65. Max-Forwards
66. 實驗性質 NEL
67. Origin
68. 已棄用 Pragma
69. Proxy-Authenticate
70. Proxy-Authorization
71. Range
72. Referer
73. Referrer-Policy
74. Retry-After
75. 實驗性質 RTT
76. 實驗性質 Save-Data
77. 實驗性質 Sec-CH-Prefers-Reduced-Motion
78. 實驗性質 Sec-CH-UA
79. 實驗性質 Sec-CH-UA-Arch
80. 實驗性質 Sec-CH-UA-Bitness
81. 已棄用 Sec-CH-UA-Full-Version
82. 實驗性質 Sec-CH-UA-Full-Version-List
83. 實驗性質 Sec-CH-UA-Mobile
84. 實驗性質 Sec-CH-UA-Model
85. 實驗性質 Sec-CH-UA-Platform
86. 實驗性質 Sec-CH-UA-Platform-Version
87. Sec-Fetch-Dest
88. Sec-Fetch-Mode
89. Sec-Fetch-Site
90. Sec-Fetch-User
91. 實驗性質非標準 Sec-GPC
92. Sec-WebSocket-Accept
93. Server
94. Server-Timing
95. Service-Worker-Navigation-Preload
96. Set-Cookie
97. SourceMap
98. Strict-Transport-Security
99. TE
100. Timing-Allow-Origin
101. 已棄用 Tk
102. Trailer
103. Transfer-Encoding
104. Upgrade
105. Upgrade-Insecure-Requests
106. User-Agent
107. Vary
108. Via
109. 非標準已棄用 Viewport-Width
110. Want-Digest
111. 已棄用 Warning
112. 非標準已棄用 Width
113. WWW-Authenticate
114. X-Content-Type-Options
115. 非標準 X-DNS-Prefetch-Control
116. 非標準 X-Forwarded-For
117. 非標準 X-Forwarded-Host
118. 非標準 X-Forwarded-Proto
119. X-Frame-Options
120. 非標準 X-XSS-Protection
HTTP request methods
HTTP response status codes
CSP directives
1. CSP source values
2. CSP: base-uri
3. 已棄用 CSP: block-all-mixed-content
4. CSP: child-src
5. CSP: connect-src
6. CSP: default-src
7. CSP: font-src
8. CSP: form-action
9. CSP: frame-ancestors
10. CSP: frame-src
11. CSP: img-src
12. CSP: manifest-src
13. CSP: media-src
14. CSP: object-src
15. 非標準已棄用 CSP: plugin-types
16. 實驗性質 CSP: prefetch-src
17. 非標準已棄用 CSP: referrer
18. CSP: report-to
19. 已棄用 CSP: report-uri
20. 非標準已棄用 CSP: require-sri-for
21. 實驗性質 CSP: require-trusted-types-for
22. CSP: sandbox
23. CSP: script-src
24. CSP: script-src-attr
25. CSP: script-src-elem
26. CSP: style-src
27. CSP: style-src-attr
28. CSP: style-src-elem
29. 實驗性質 CSP: trusted-types
30. CSP: upgrade-insecure-requests
31. CSP: worker-src
CORS errors
1. Reason: CORS disabled
2. Reason: CORS header 'Access-Control-Allow-Origin' does not match 'xyz'
3. Reason: CORS header 'Access-Control-Allow-Origin' missing
4. Reason: CORS header 'Origin' cannot be added
5. Reason: CORS preflight channel did not succeed
6. Reason: CORS request did not succeed
7. Reason: CORS request external redirect not allowed
8. Reason: CORS request not HTTP
9. Reason: Credential is not supported if the CORS header 'Access-Control-Allow-Origin' is '*'
10. Reason: Did not find method in CORS header 'Access-Control-Allow-Methods'
11. Reason: expected 'true' in CORS header 'Access-Control-Allow-Credentials'
12. Reason: invalid token 'xyz' in CORS header 'Access-Control-Allow-Headers'
13. Reason: invalid token 'xyz' in CORS header 'Access-Control-Allow-Methods'
14. Reason: missing token 'xyz' in CORS header 'Access-Control-Allow-Headers' from CORS preflight channel
15. Reason: Multiple CORS header 'Access-Control-Allow-Origin' not allowed
Feature-Policy directives
1. 實驗性質 Feature-Policy: accelerometer
2. 實驗性質 Feature-Policy: ambient-light-sensor
3. 實驗性質 Feature-Policy: autoplay
4. 實驗性質 Feature-Policy: battery
5. Feature-Policy: camera
6. Feature-Policy: display-capture
7. 實驗性質 Feature-Policy: document-domain
8. 實驗性質 Feature-Policy: encrypted-media
9. Feature-Policy: fullscreen
10. 實驗性質 Feature-Policy: gamepad
11. Feature-Policy: geolocation
12. 實驗性質 Feature-Policy: gyroscope
13. 實驗性質非標準 Feature-Policy: layout-animations
14. 實驗性質非標準 Feature-Policy: legacy-image-formats
15. 實驗性質 Feature-Policy: magnetometer
16. Feature-Policy: microphone
17. 實驗性質 Feature-Policy: midi
18. 實驗性質非標準 Feature-Policy: oversized-images
19. 實驗性質 Feature-Policy: payment
20. 實驗性質 Feature-Policy: picture-in-picture
21. 實驗性質 Feature-Policy: publickey-credentials-get
22. 實驗性質 Feature-Policy: screen-wake-lock
23. 實驗性質 Feature-Policy: speaker-selection
24. 實驗性質非標準 Feature-Policy: sync-xhr
25. 實驗性質非標準 Feature-Policy: unoptimized-images
26. 實驗性質非標準 Feature-Policy: unsized-media
27. 實驗性質 Feature-Policy: usb
28. 實驗性質 Feature-Policy: web-share
29. 實驗性質 Feature-Policy: xr-spatial-tracking

201 Created

狀態

規範

瀏覽器相容性

參見