Files
| File Name |
| Name | HTTP |
| Version | |
| Badge |
|
| Last Updated | 2021-10-22T17:06:47Z |
Table of Contents
-
CSP
- Content-Security-Policy
- Content-Security-Policy-Report-Only
- CSP: base-uri
- CSP: block-all-mixed-content
- CSP: child-src
- CSP: connect-src
- CSP: default-src
- CSP: font-src
- CSP: form-action
- CSP: frame-ancestors
- CSP: frame-src
- CSP: img-src
- CSP: manifest-src
- CSP: media-src
- CSP: navigate-to
- CSP: object-src
- CSP: plugin-types
- CSP: prefetch-src
- CSP: referrer
- CSP: report-to
- CSP: report-uri
- CSP: require-sri-for
- CSP: require-trusted-types-for
- CSP: sandbox
- CSP: script-src
- CSP: script-src-attr
- CSP: script-src-elem
- CSP: style-src
- CSP: style-src-attr
- CSP: style-src-elem
- CSP: trusted-types
- CSP: upgrade-insecure-requests
- CSP: worker-src
-
Guides
- Authentication
- Browser detection using the user agent
- Caching
- Compression
- Conditional requests
- Connection management in HTTP 1.x
- Content negotiation
- Content negotiation: List of default Accept values
- Cookies
- CORS
- Cross-Origin Resource Policy (CORP)
- CSP
- Errors
- Errors: CORSAllowOriginNotMatchingOrigin
- Errors: CORSDidNotSucceed
- Errors: CORSDisabled
- Errors: CORSExternalRedirectNotAllowed
- Errors: CORSInvalidAllowHeader
- Errors: CORSInvalidAllowMethod
- Errors: CORSMethodNotFound
- Errors: CORSMIssingAllowCredentials
- Errors: CORSMissingAllowHeaderFromPreflight
- Errors: CORSMissingAllowOrigin
- Errors: CORSMultipleAllowOriginNotAllowed
- Errors: CORSNotSupportingCredentials
- Errors: CORSOriginHeaderNotAdded
- Errors: CORSPreflightDidNotSucceed
- Errors: CORSRequestNotHttp
- Feature Policy
- Feature Policy: Using Feature Policy
- Messages
- Network Error Logging
- Overview
- Protocol upgrade mechanism
- Proxy servers and tunneling
- Proxy servers and tunneling: Proxy Auto-Configuration PAC file
- Public Key Pinning
- Session
- Guides: Basics
-
Headers
- Accept
- Accept (RFC 2616)
- Accept (RFC 7231)
- Accept-CH
- Accept-CH-Lifetime
- Accept-Charset (RFC 2616)
- Accept-Charset (RFC 7231)
- Accept-Encoding
- Accept-Encoding (RFC 2616)
- Accept-Encoding (RFC 7231)
- Accept-Language
- Accept-Language (RFC 2616)
- Accept-Language (RFC 7231)
- Accept-Patch
- Accept-Post
- Accept-Ranges
- Accept-Ranges (RFC 2616)
- Access-Control-Allow-Credentials
- Access-Control-Allow-Headers
- Access-Control-Allow-Methods
- Access-Control-Allow-Origin
- Access-Control-Expose-Headers
- Access-Control-Max-Age
- Access-Control-Request-Headers
- Access-Control-Request-Method
- Age
- Age (RFC 2616)
- Age (RFC 7234)
- Allow
- Allow (RFC 2616)
- Allow (RFC 7231)
- Alt-Svc
- Authorization
- Authorization (RFC 2616)
- Authorization (RFC 7235)
- Cache-Control
- Cache-Control (RFC 2616)
- Cache-Control (RFC 7234)
- Clear-Site-Data
- Connection
- Connection (RFC 2616)
- Content-Disposition
- Content-DPR
- Content-Encoding
- Content-Encoding (RFC 2616)
- Content-Language
- Content-Language (RFC 2616)
- Content-Length
- Content-Length (RFC 2616)
- Content-Location
- Content-Location (RFC 2616)
- Content-MD5 (RFC 2616)
- Content-Range
- Content-Range (RFC 2616)
- Content-Type
- Content-Type (RFC 2616)
- Cookie
- Cookie2
- Cross-Origin-Embedder-Policy
- Cross-Origin-Opener-Policy
- Cross-Origin-Resource-Policy
- Date
- Date (RFC 2616)
- Device-Memory
- DNT
- Downlink
- DPR
- Early-Data
- ECT
- ETag
- ETag (RFC 2616)
- Expect
- Expect (RFC 2616)
- Expect (RFC 7231)
- Expect-CT
- Expires
- Expires (RFC 2616)
- Expires (RFC 7234)
- Feature-Policy
- Feature-Policy: accelerometer
- Feature-Policy: ambient-light-sensor
- Feature-Policy: autoplay
- Feature-Policy: battery
- Feature-Policy: camera
- Feature-Policy: display-capture
- Feature-Policy: document-domain
- Feature-Policy: encrypted-media
- Feature-Policy: fullscreen
- Feature-Policy: gamepad
- Feature-Policy: geolocation
- Feature-Policy: gyroscope
- Feature-Policy: layout-animations
- Feature-Policy: legacy-image-formats
- Feature-Policy: magnetometer
- Feature-Policy: microphone
- Feature-Policy: midi
- Feature-Policy: oversized-images
- Feature-Policy: payment
- Feature-Policy: picture-in-picture
- Feature-Policy: publickey-credentials-get
- Feature-Policy: screen-wake-lock
- Feature-Policy: speaker-selection
- Feature-Policy: sync-xhr
- Feature-Policy: unoptimized-images
- Feature-Policy: unsized-media
- Feature-Policy: usb
- Feature-Policy: vibrate
- Feature-Policy: vr
- Feature-Policy: web-share
- Feature-Policy: xr-spatial-tracking
- Forwarded
- From
- From (RFC 2616)
- From (RFC 7231)
- Headers
- Host
- Host (RFC 2616)
- If-Match
- If-Match (RFC 2616)
- If-Match (RFC 7232)
- If-Modified-Since
- If-Modified-Since (RFC 2616)
- If-Modified-Since (RFC 7232)
- If-None-Match
- If-None-Match (RFC 2616)
- If-None-Match (RFC 7232)
- If-Range
- If-Range (RFC 2616)
- If-Range (RFC 7232)
- If-Unmodified-Since
- If-Unmodified-Since (RFC 2616)
- If-Unmodified-Since (RFC 7232)
- Keep-Alive
- Large-Allocation
- Last-Modified
- Last-Modified (RFC 2616)
- Link
- Location
- Location (RFC 2616)
- Location (RFC 7231)
- Max-Forwards (RFC 2616)
- Max-Forwards (RFC 7231)
- NEL
- Origin
- Pragma
- Pragma (RFC 2616)
- Pragma (RFC 7234)
- Proxy-Authenticate
- Proxy-Authenticate (RFC 2616)
- Proxy-Authenticate (RFC 7235)
- Proxy-Authorization
- Proxy-Authorization (RFC 2616)
- Proxy-Authorization (RFC 7235)
- Public-Key-Pins
- Public-Key-Pins-Report-Only
- Quality Values (RFC 7231)
- Range
- Range (RFC 2616)
- Referer
- Referer (RFC 2616)
- Referer (RFC 7231)
- Referrer-Policy
- Retry-After
- Retry-After (RFC 2616)
- Retry-After (RFC 7231)
- RTT
- Save-Data
- Sec-Fetch-Dest
- Sec-Fetch-Mode
- Sec-Fetch-Site
- Sec-Fetch-User
- Sec-WebSocket-Accept
- Server
- Server (RFC 2616)
- Server (RFC 7231)
- Server-Timing
- Set-Cookie
- Set-Cookie2
- Set-Cookie: SameSite
- SourceMap
- Strict-Transport-Security
- TE
- TE (RFC 2616)
- Timing-Allow-Origin
- Tk
- Trailer
- Trailer (RFC 2616)
- Transfer-Encoding
- Transfer-Encoding (RFC 2616)
- Upgrade
- Upgrade (RFC 2616)
- Upgrade-Insecure-Requests
- User-Agent
- User-Agent (RFC 2616)
- User-Agent (RFC 7231)
- User-Agent: Firefox
- Vary
- Vary (RFC 2616)
- Vary (RFC 7231)
- Via
- Via (RFC 2616)
- Viewport-Width
- Warning
- Warning (RFC 2616)
- Warning (RFC 7234)
- Width
- WWW-Authenticate
- WWW-Authenticate (RFC 2616)
- WWW-Authenticate (RFC 7235)
- X-Content-Type-Options
- X-DNS-Prefetch-Control
- X-Forwarded-For
- X-Forwarded-Host
- X-Forwarded-Proto
- X-Frame-Options
- X-XSS-Protection
- Methods
-
RFC 2616: HTTP/1.1
- Access Authentication (RFC 2616)
- Caching in HTTP (RFC 2616)
- Connections (RFC 2616)
- Content Negotiation (RFC 2616)
- Entity (RFC 2616)
- HTTP Message (RFC 2616)
- Method Definitions (RFC 2616)
- Protocol Parameters (RFC 2616)
- Request (RFC 2616)
- Response (RFC 2616)
- RFC 2616: HTTP/1.1
- Security Considerations (RFC 2616)
- Status Code Definitions (RFC 2616)
- RFC 4918: WebDAV
- RFC 5023: The Atom Publishing Protocol
- RFC 7230: Message Syntax and Routing
- RFC 7231: Semantics and Content
- RFC 7232: Conditional Requests
- RFC 7233: Range Requests
- RFC 7234: Caching
- RFC 7235: Authentication
-
RFC 7540: Hypertext Transfer Protocol Version 2 (HTTP/2)
- Additional HTTP Requirements/Considerations (RFC 7540)
- Error Codes (RFC 7540)
- Frame Definitions (RFC 7540)
- HTTP Frames (RFC 7540)
- HTTP Message Exchanges (RFC 7540)
- IANA Considerations (RFC 7540)
- RFC 7540: Hypertext Transfer Protocol Version 2 (HTTP/2)
- Security Considerations (RFC 7540)
- Starting HTTP/2 (RFC 7540)
- Streams and Multiplexing (RFC 7540)
-
Status
- 100 Continue
- 100 Continue (RFC 7231)
- 101 Switching Protocols
- 101 Switching Protocols (RFC 7231)
- 103 Early Hints
- 200 OK
- 200 OK (RFC 7231)
- 201 Created
- 201 Created (RFC 7231)
- 202 Accepted
- 202 Accepted (RFC 7231)
- 203 Non-Authoritative Information
- 203 Non-Authoritative Information (RFC 7231)
- 204 No Content
- 204 No Content (RFC 7231)
- 205 Reset Content
- 205 Reset Content (RFC 7231)
- 206 Partial Content
- 206 Partial Content (RFC 7233)
- 207 Multi-Status (RFC 4918)
- 300 Multiple Choices
- 300 Multiple Choices (RFC 7231)
- 301 Moved Permanently
- 301 Moved Permanently (RFC 7231)
- 302 Found
- 302 Found (RFC 7231)
- 303 See Other
- 303 See Other (RFC 7231)
- 304 Not Modified
- 304 Not Modified (RFC 7232)
- 305 Use Proxy (RFC 7231)
- 306 (Unused) (RFC 7231)
- 307 Temporary Redirect
- 307 Temporary Redirect (RFC 7231)
- 308 Permanent Redirect
- 400 Bad Request
- 400 Bad Request (RFC 7231)
- 401 Unauthorized
- 401 Unauthorized (RFC 7235)
- 402 Payment Required
- 402 Payment Required (RFC 7231)
- 403 Forbidden
- 403 Forbidden (RFC 7231)
- 404 Not Found
- 404 Not Found (RFC 7231)
- 405 Method Not Allowed
- 405 Method Not Allowed (RFC 7231)
- 406 Not Acceptable
- 406 Not Acceptable (RFC 7231)
- 407 Proxy Authentication Required
- 407 Proxy Authentication Required (RFC 7235)
- 408 Request Timeout
- 408 Request Timeout (RFC 7231)
- 409 Conflict
- 409 Conflict (RFC 7231)
- 410 Gone
- 410 Gone (RFC 7231)
- 411 Length Required
- 411 Length Required (RFC 7231)
- 412 Precondition Failed
- 412 Precondition Failed (RFC 7232)
- 413 Payload Too Large
- 413 Payload Too Large (RFC 7231)
- 414 URI Too Long
- 414 URI Too Long (RFC 7231)
- 415 Unsupported Media Type
- 415 Unsupported Media Type (RFC 7231)
- 416 Range Not Satisfiable
- 416 Range Not Satisfiable (RFC 7233)
- 417 Expectation Failed
- 417 Expectation Failed (RFC 7231)
- 418 I'm a teapot
- 422 Unprocessable Entity
- 422 Unprocessable Entity (RFC 4918)
- 423 Locked (RFC 4918)
- 424 Failed Dependency (RFC 4918)
- 425 Too Early
- 426 Upgrade Required
- 426 Upgrade Required (RFC 7231)
- 428 Precondition Required
- 429 Too Many Requests
- 431 Request Header Fields Too Large
- 451 Unavailable For Legal Reasons
- 500 Internal Server Error
- 500 Internal Server Error (RFC 7231)
- 501 Not Implemented
- 501 Not Implemented (RFC 7231)
- 502 Bad Gateway
- 502 Bad Gateway (RFC 7231)
- 503 Service Unavailable
- 503 Service Unavailable (RFC 7231)
- 504 Gateway Timeout
- 504 Gateway Timeout (RFC 7231)
- 505 HTTP Version Not Supported
- 505 HTTP Version Not Supported (RFC 7231)
- 506 Variant Also Negotiates
- 507 Insufficient Storage
- 507 Insufficient Storage (RFC 4918)
- 508 Loop Detected
- 510 Not Extended
- 511 Network Authentication Required
- Status