Difference between revisions of "HTTP headers"
Jump to navigation
Jump to search
↑ https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy
| (25 intermediate revisions by 6 users not shown) | |||
| Line 2: | Line 2: | ||
| − | * X-Frame-Options (deprecated): https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options | + | * <code>[[WWW-Authenticate]]</code> |
| + | * <code>[[HTTP Header: Authorization|Authorization:]]</code> | ||
| + | * <code>[[Content-Security-Policy]]</code><ref>https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy</ref> | ||
| + | * <code>[[X-Frame-Options]]</code> (deprecated): https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options | ||
| − | * | + | * <code>[[strict-Transport-Security]]</code> |
| + | * [[Content-Security-Policy]] | ||
| + | * [[X-Frame-Options]] | ||
| + | * [[X-Content-Type-Options]] | ||
| + | * [[Referrer-Policy]] | ||
| + | * [[Permissions-Policy]] | ||
| + | * <code>[[Cache-Control]]: [[no-cache]], [[no-store]], [[max-age]]</code> | ||
== Related terms == | == Related terms == | ||
| + | * <code>[[aws s3 cp --cache-control]]</code> | ||
* [[Clickjacking]] | * [[Clickjacking]] | ||
| − | * [[Bearer token]] | + | * [[Bearer token]]: <code>[[Authorization:]] Bearer .../...</code> |
| + | * <code>[[curl --header]]</code> | ||
| + | * [[Python]], <code>[[urllib]]</code> library | ||
| + | * [[HTTP Security headers]] | ||
| + | * <code>[[has been blocked by CORS policy]] no '[[access-control-allow-origin]]' header is present on the request</code> | ||
== Activities == | == Activities == | ||
* Read about [[Amazon CloudFront]]: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/example-function-add-security-headers.html | * Read about [[Amazon CloudFront]]: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/example-function-add-security-headers.html | ||
| + | * Cloudflare: https://developers.cloudflare.com/pages/how-to/add-custom-http-headers/ | ||
== See also == | == See also == | ||
| + | * {{HTTP Header}} | ||
| + | * {{HTTP2}} | ||
* {{HTTPS}} | * {{HTTPS}} | ||
[[Category:Web]] | [[Category:Web]] | ||
Latest revision as of 10:06, 20 July 2023
WWW-AuthenticateAuthorization:Content-Security-Policy[1]X-Frame-Options(deprecated): https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
strict-Transport-Security- Content-Security-Policy
- X-Frame-Options
- X-Content-Type-Options
- Referrer-Policy
- Permissions-Policy
Cache-Control: no-cache, no-store, max-age
Related terms[edit]
aws s3 cp --cache-control- Clickjacking
- Bearer token:
Authorization: Bearer .../... curl --header- Python,
urlliblibrary - HTTP Security headers
has been blocked by CORS policy no 'access-control-allow-origin' header is present on the request
Activities[edit]
- Read about Amazon CloudFront: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/example-function-add-security-headers.html
- Cloudflare: https://developers.cloudflare.com/pages/how-to/add-custom-http-headers/
See also[edit]
- HTTP Headers:
Authorization:, X-Frame-Options, Content-Security-Policy, Cache-Control - HTTP/2, HTTP/3, Media type (
Content-Type), HTTP headers - HTTP, HTTP client, HTTP/1.1, HTTP/2, HTTP/3, HTTPS, HSTS CSR, TLS, SSL,
openSSL, WebSockets, WebRTC,ssl_certificateQUIC, HPKP, CT, List of HTTP status codes, URL redirection, Content-type:, Webhook, HTTP headers,--insecure, Axios HTTP client, HTTP cookies, HTTP ETag
Advertising:
