Difference between revisions of "HTTP headers"
Jump to navigation
Jump to search
↑ https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy
| Line 34: | Line 34: | ||
== See also == | == See also == | ||
| + | * {{XFF}} | ||
* {{HTTP headers}} | * {{HTTP headers}} | ||
* {{HTTP Header}} | * {{HTTP Header}} | ||
[[Category:Web]] | [[Category:Web]] | ||
Revision as of 09:51, 15 October 2024
WWW-AuthenticateAuthorization:Content-Security-Policy[1]X-Frame-Options(deprecated): https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
strict-Transport-Security- Content-Security-Policy
- X-Frame-Options
- X-Content-Type-Options
- Referrer-Policy
- Permissions-Policy
Cache-Control: no-cache, no-store, max-age- X-Forwarded-For (XFF)
Activities
- Use Terraform aws lb: drop_invalid_header_fields to drop not valid headers
Related terms
aws s3 cp --cache-control- Clickjacking
- Bearer token:
Authorization: Bearer .../... curl --header- Python,
urlliblibrary - HTTP Security headers
has been blocked by CORS policy no 'access-control-allow-origin' header is present on the request
Activities
- Read about Amazon CloudFront: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/example-function-add-security-headers.html
- Cloudflare: https://developers.cloudflare.com/pages/how-to/add-custom-http-headers/
See also
- X-Forwarded-For (XFF), HTTP/1.1: Request Header Fields
- HTTP headers, Security headers, HTTP Security headers, X-Forwarded-For (XFF)
- HTTP Headers:
Authorization:, X-Frame-Options, Content-Security-Policy, Cache-Control, Terraform:drop_invalid_header_fields
Advertising:
