HTTP
Guides
An overview of HTTP
典型的 HTTP 會話
HTTP Messages
MIME types (IANA media types)
Compression in HTTP
HTTP caching
HTTP authentication
使用 HTTP Cookie
Redirections in HTTP
HTTP conditional requests
HTTP range requests
Content negotiation
Connection management in HTTP/1.x
Evolution of HTTP
協議升級機制
Proxy servers and tunneling
HTTP Client hints
Security and privacy
References
HTTP headers
1. Accept
2. Accept-CH
3. Accept-Charset
4. Accept-Encoding
5. Accept-Language
6. Accept-Patch
7. Accept-Post
8. Accept-Ranges
9. Access-Control-Allow-Credentials
10. Access-Control-Allow-Headers
11. Access-Control-Allow-Methods
12. Access-Control-Allow-Origin
13. Access-Control-Expose-Headers
14. Access-Control-Max-Age
15. Access-Control-Request-Headers
16. Access-Control-Request-Method
17. Age
18. Allow
19. Alt-Svc
20. Alt-Used
21. Attribution-Reporting-Eligible 實驗性質
22. Attribution-Reporting-Register-Source 實驗性質
23. Attribution-Reporting-Register-Trigger 實驗性質
24. Authorization
25. Cache-Control
26. Clear-Site-Data
27. Connection
28. Content-Digest
29. Content-Disposition
30. Content-DPR 非標準已棄用
31. Content-Encoding
32. Content-Language
33. Content-Length
34. Content-Location
35. Content-Range
36. Content-Security-Policy
37. Content-Security-Policy-Report-Only
38. Content-Type
39. Cookie
40. Critical-CH 實驗性質
41. Cross-Origin-Embedder-Policy
42. Cross-Origin-Opener-Policy
43. Cross-Origin-Resource-Policy
44. Date
45. Device-Memory
46. Digest 非標準已棄用
47. DNT 非標準已棄用
48. Downlink 實驗性質
49. DPR 非標準已棄用
50. Early-Data 實驗性質
51. ECT 實驗性質
52. ETag
53. Expect
54. Expect-CT 已棄用
55. Expires
56. Forwarded
57. From
58. Host
59. If-Match
60. If-Modified-Since
61. If-None-Match
62. If-Range
63. If-Unmodified-Since
64. Keep-Alive
65. Last-Modified
66. Link
67. Location
68. Max-Forwards
69. NEL 實驗性質
70. No-Vary-Search 實驗性質
71. Observe-Browsing-Topics 實驗性質非標準
72. Origin
73. Origin-Agent-Cluster 實驗性質
74. Permissions-Policy
75. Pragma 已棄用
76. Priority
77. Proxy-Authenticate
78. Proxy-Authorization
79. Range
80. Referer
81. Referrer-Policy
82. Refresh
83. Report-To 非標準已棄用
84. Reporting-Endpoints 實驗性質
85. Repr-Digest
86. Retry-After
87. RTT 實驗性質
88. Save-Data 實驗性質
89. Sec-Browsing-Topics 實驗性質非標準
90. Sec-CH-Prefers-Color-Scheme 實驗性質
91. Sec-CH-Prefers-Reduced-Motion 實驗性質
92. Sec-CH-Prefers-Reduced-Transparency 實驗性質
93. Sec-CH-UA 實驗性質
94. Sec-CH-UA-Arch 實驗性質
95. Sec-CH-UA-Bitness 實驗性質
96. Sec-CH-UA-Full-Version 已棄用
97. Sec-CH-UA-Full-Version-List 實驗性質
98. Sec-CH-UA-Mobile 實驗性質
99. Sec-CH-UA-Model 實驗性質
100. Sec-CH-UA-Platform 實驗性質
101. Sec-CH-UA-Platform-Version 實驗性質
102. Sec-Fetch-Dest
103. Sec-Fetch-Mode
104. Sec-Fetch-Site
105. Sec-Fetch-User
106. Sec-GPC 實驗性質非標準
107. Sec-Purpose
108. Sec-WebSocket-Accept
109. Sec-WebSocket-Extensions
110. Sec-WebSocket-Key
111. Sec-WebSocket-Protocol
112. Sec-WebSocket-Version
113. Server
114. Server-Timing
115. Service-Worker-Navigation-Preload
116. Set-Cookie
117. Set-Login 實驗性質
118. SourceMap
119. Speculation-Rules 實驗性質
120. Strict-Transport-Security
121. Supports-Loading-Mode 實驗性質
122. TE
123. Timing-Allow-Origin
124. Tk 非標準已棄用
125. Trailer
126. Transfer-Encoding
127. Upgrade
128. Upgrade-Insecure-Requests
129. User-Agent
130. Vary
131. Via
132. Viewport-Width 非標準已棄用
133. Want-Content-Digest
134. Want-Digest 非標準已棄用
135. Want-Repr-Digest
136. Warning 已棄用
137. Width 非標準已棄用
138. WWW-Authenticate
139. X-Content-Type-Options
140. X-DNS-Prefetch-Control 非標準
141. X-Forwarded-For 非標準
142. X-Forwarded-Host 非標準
143. X-Forwarded-Proto 非標準
144. X-Frame-Options 回應標頭 已棄用
145. X-XSS-Protection 非標準
HTTP request methods
HTTP response status codes
CSP directives
1. CSP source values
2. CSP: base-uri
3. CSP: block-all-mixed-content 已棄用
4. CSP: child-src
5. CSP: connect-src
6. CSP: default-src
7. CSP: fenced-frame-src 實驗性質
8. CSP: font-src
9. CSP: form-action
10. CSP: frame-ancestors
11. CSP: frame-src
12. CSP: img-src
13. CSP: manifest-src
14. CSP: media-src
15. CSP: object-src
16. CSP: prefetch-src 非標準已棄用
17. CSP: report-to
18. CSP: report-uri 已棄用
19. CSP: require-trusted-types-for 實驗性質
20. CSP: sandbox
21. CSP: script-src
22. CSP: script-src-attr
23. CSP: script-src-elem
24. CSP: style-src
25. CSP: style-src-attr
26. CSP: style-src-elem
27. CSP: trusted-types 實驗性質
28. CSP: upgrade-insecure-requests
29. CSP: worker-src
CORS errors
1. Reason: CORS disabled
2. Reason: CORS header 'Access-Control-Allow-Origin' does not match 'xyz'
3. Reason: CORS header 'Access-Control-Allow-Origin' missing
4. Reason: CORS header 'Origin' cannot be added
5. Reason: CORS preflight channel did not succeed
6. Reason: CORS request did not succeed
7. Reason: CORS request external redirect not allowed
8. Reason: CORS request not HTTP
9. Reason: Credential is not supported if the CORS header 'Access-Control-Allow-Origin' is '*'
10. Reason: Did not find method in CORS header 'Access-Control-Allow-Methods'
11. Reason: expected 'true' in CORS header 'Access-Control-Allow-Credentials'
12. Reason: invalid token 'xyz' in CORS header 'Access-Control-Allow-Headers'
13. Reason: invalid token 'xyz' in CORS header 'Access-Control-Allow-Methods'
14. Reason: missing token 'xyz' in CORS header 'Access-Control-Allow-Headers' from CORS preflight channel
15. Reason: Multiple CORS header 'Access-Control-Allow-Origin' not allowed
Permissions-Policy directives
HTTP resources and specifications

狀態

規範

參見