HTTP headers

wikipedia:HTTP headers

• WWW-Authenticate
• Authorization:
• Content-Security-Policy
• X-Frame-Options (deprecated): https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options

Related terms

• Clickjacking
• Bearer token: Authorization: Bearer .../...
• curl --header

Activities

• Read about Amazon CloudFront: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/example-function-add-security-headers.html

See also

• HTTP Headers: Authorization:, X-Frame-Options, Content-Security-Policy, Cache-Control, Terraform: drop_invalid_header_fields
• HTTP/2, HTTP/3, Media type (Content-Type), HTTP headers, CVE-2023-44487 HTTP/2 Rapid Reset Vulnerability, Cloudflare Protocol optimization
• HTTP: POST, PUT, PATCH, GET, HEAD, OPTIONS, DELETE, Webhook, curl -X POST, allowed_methods
• HTTP, HTTP client, HTTP/1.1, HTTP/2, HTTP/3, HTTPS, HSTS CSR, TLS, SSL, openSSL, WebSockets, WebRTC, ssl_certificate QUIC, HPKP, CT, List of HTTP status codes, URL redirection, Content-type:, Webhook, HTTP headers, --insecure, Axios HTTP client, HTTP cookies, HTTP ETag, Hypertext Transfer Protocol -- HTTP/1.1

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy