HTTP headers
Origin HTTP Header Meaning
Origin identifies the scheme, host, and port that initiated a request.
Meaning
The browser is sending the request's origin for CORS and related security checks.
Where it appears
Browsers send it on CORS requests and many state-changing same-origin requests.
What to check
Check exact origin matching, including scheme and port, before allowing cross-origin access.
Example
Origin: https://app.exampleReferences
- Registry
- IANA HTTP Field Name Registry
- Guide
- MDN Origin