lightmy.day

HTTP 標頭

HTTP 標頭查詢

查詢常見請求與回應標頭的含義，附上簡短範例並提供登錄檔或規範的參考。

標頭答案相關
AcceptAccept 告訴伺服器用戶端可以讀取哪些媒體類型。Content-Type, Vary, HTTP 200, HTTP 415
Accept-EncodingAccept-Encoding 告訴伺服器用戶端支援哪些壓縮格式。Content-Encoding, Vary, HTTP 200
Accept-LanguageAccept-Language 告訴伺服器用戶端偏好哪些語言。Vary, HTTP 200
AuthorizationAuthorization 為所請求的資源傳送憑證。WWW-Authenticate, HTTP 401, HTTP 403
WWW-AuthenticateWWW-Authenticate 告訴用戶端如何進行驗證。Authorization, HTTP 401
Cache-ControlCache-Control 為瀏覽器與共用快取設定快取規則。CDN-Cache-Control, ETag, Expires, Age, Vary, HTTP 200, HTTP 304
CDN-Cache-ControlCDN-Cache-Control 專門對 CDN 共用快取提供快取指令。Cache-Control, Age, Vary, HTTP 200, HTTP 304
ETagETag 標識資源表示形式的特定版本。If-None-Match, Last-Modified, Cache-Control, HTTP 200, HTTP 304, HTTP 412
If-None-MatchIf-None-Match 要求伺服器僅在 ETag 不再相符時才回應。ETag, Cache-Control, GET, HEAD, HTTP 304, HTTP 412
If-Modified-SinceIf-Modified-Since 詢問資源是否在某個時間戳之後有所變更。Last-Modified, ETag, GET, HEAD, HTTP 304
Last-ModifiedLast-Modified 提供資源最後變更的時間。If-Modified-Since, ETag, Cache-Control, HTTP 200, HTTP 304
ExpiresExpires 提供回應變為過期的絕對時間。Cache-Control, Age, HTTP 200, HTTP 304
AgeAge 說明一個快取回應已被儲存了多少秒。Cache-Control, CDN-Cache-Control, Expires, HTTP 200, HTTP 304
VaryVary 告訴快取哪些請求標頭會影響回應。Accept, Accept-Encoding, Accept-Language, Cache-Control, HTTP 200, HTTP 304
Content-TypeContent-Type 標識請求或回應內容的媒體類型。Accept, Content-Length, Content-Encoding, Content-Disposition, POST, PUT, PATCH, HTTP 200, HTTP 415
Content-LengthContent-Length 以位元組為單位提供主體大小。Content-Type, Expect, POST, PUT, PATCH, HTTP 200, HTTP 400
Content-EncodingContent-Encoding 說明主體套用了哪種編碼。Accept-Encoding, Content-Type, Vary, HTTP 200, HTTP 415
Content-DispositionContent-Disposition 提示內容應內嵌顯示還是以檔案下載。Content-Type, Content-Length, HTTP 200
HostHost 指明用戶端想要連到的授權機構。Origin, Via, HTTP 400
LocationLocation 提供重新導向或新建立資源的目標 URL。HTTP 201, HTTP 301, HTTP 302, HTTP 307, HTTP 308
RefererReferer 回報引導出此請求的頁面或 URL。Referrer-Policy, HTTP 200
User-AgentUser-Agent 標識發出請求的用戶端軟體。Vary, HTTP 200
ExpectExpect 要求伺服器在用戶端傳送主體前先確認。Content-Length, POST, PUT, HTTP 100
Keep-AliveKeep-Alive 為舊版 HTTP/1.x 連線攜帶連線持續性參數。Upgrade, Via, HTTP 200
UpgradeUpgrade 要求將連線切換為另一種協定。Keep-Alive, Via, HTTP 101
ViaVia 記錄處理過訊息的中介者。Host, Upgrade, Keep-Alive, HTTP 200
OriginOrigin 標識發起請求的協定、主機與連接埠。Access-Control-Allow-Origin, Access-Control-Request-Method, Host
Access-Control-Allow-OriginAccess-Control-Allow-Origin 說明哪個來源可以讀取回應。Origin, Access-Control-Allow-Credentials, Access-Control-Expose-Headers
Access-Control-Allow-MethodsAccess-Control-Allow-Methods 列出 CORS 預檢所允許的方法。Access-Control-Request-Method, Access-Control-Allow-Origin, OPTIONS
Access-Control-Allow-HeadersAccess-Control-Allow-Headers 列出 CORS 預檢所允許的請求標頭。Access-Control-Request-Headers, Access-Control-Allow-Origin, OPTIONS
Access-Control-Allow-CredentialsAccess-Control-Allow-Credentials 允許在 CORS 回應中帶入憑證。Access-Control-Allow-Origin, Origin
Access-Control-Expose-HeadersAccess-Control-Expose-Headers 列出瀏覽器 JavaScript 可讀取的回應標頭。Access-Control-Allow-Origin
Access-Control-Request-MethodAccess-Control-Request-Method 告訴伺服器 CORS 預檢想使用哪個方法。Origin, Access-Control-Allow-Methods, Access-Control-Allow-Origin, OPTIONS
Access-Control-Request-HeadersAccess-Control-Request-Headers 列出 CORS 預檢想傳送的標頭。Origin, Access-Control-Allow-Headers, Access-Control-Allow-Origin, OPTIONS
Strict-Transport-SecurityStrict-Transport-Security 告訴瀏覽器未來對此主機使用 HTTPS。Content-Security-Policy, Upgrade, HTTP 200
Content-Security-PolicyContent-Security-Policy 限制頁面資源可從何處載入。Cross-Origin-Resource-Policy, Referrer-Policy, X-Frame-Options, Strict-Transport-Security, HTTP 200
Cross-Origin-Resource-PolicyCross-Origin-Resource-Policy 控制哪些來源可以嵌入某項資源。Content-Security-Policy, Origin, Access-Control-Allow-Origin, HTTP 200
Referrer-PolicyReferrer-Policy 控制瀏覽器傳送多少引用來源資訊。Referer, Content-Security-Policy, HTTP 200
X-Frame-OptionsX-Frame-Options 控制頁面是否可嵌入框架中。Content-Security-Policy, HTTP 200
CookieCookie 將儲存的 cookie 值傳送給伺服器。Set-Cookie, Cache-Control, HTTP 200, HTTP 401
Set-CookieSet-Cookie 要求瀏覽器儲存或更新 cookie。Cookie, Cache-Control, HTTP 200, HTTP 401
AllowAllow 列出某項資源所支援的 HTTP 方法。OPTIONS, HTTP 204, HTTP 405
Retry-AfterRetry-After 告訴用戶端何時再次嘗試請求。HTTP 429, HTTP 503