読み込み中...
読み込み中...
HTTPリクエスト・レスポンスヘッダーの一覧と詳細解説。用途別の検索、設定例のコピーに対応。Web開発の参考に使える無料オンラインツール。
53 headers
AcceptrequestMedia types the client can handle
Accept: text/html, application/jsonAccept-EncodingrequestAcceptable content encodings
Accept-Encoding: gzip, deflate, brAccept-LanguagerequestPreferred natural languages
Accept-Language: en-US,en;q=0.9,ja;q=0.8AuthorizationrequestCredentials for authentication
Authorization: Bearer eyJhbGci...Cache-ControlgeneralCaching directives for request/response
Cache-Control: no-cache, max-age=3600ConnectiongeneralControl options for the current connection
Connection: keep-aliveContent-DispositionresponsePresentation info for the body
Content-Disposition: attachment; filename="file.pdf"Content-EncodinggeneralEncoding applied to the body
Content-Encoding: gzipContent-LengthgeneralSize of the body in bytes
Content-Length: 1024Content-Security-PolicyresponseControls resources the agent is allowed to load
Content-Security-Policy: default-src 'self'Content-TypegeneralMedia type of the body
Content-Type: application/json; charset=utf-8CookierequestPreviously set cookies
Cookie: session_id=abc123; theme=darkCross-Origin-Opener-PolicyresponseControls cross-origin window access
Cross-Origin-Opener-Policy: same-originDategeneralDate and time the message was sent
Date: Tue, 15 Oct 2024 12:00:00 GMTETagresponseIdentifier for a specific version of a resource
ETag: "33a64df551425fcc55e4d42a148795d9f25f89d4"ExpectrequestExpectations the server must fulfill
Expect: 100-continueExpiresresponseDate after which the response is stale
Expires: Thu, 01 Dec 2024 16:00:00 GMTForwardedrequestInfo from reverse proxies
Forwarded: for=192.0.2.60;proto=https;by=203.0.113.43FromrequestEmail of the requesting user agent
From: user@example.comHostrequestHost and port of the requested resource
Host: www.example.com:443If-MatchrequestConditional request based on ETag
If-Match: "bfc1ef"If-Modified-SincerequestConditional request based on date
If-Modified-Since: Wed, 21 Oct 2015 07:28:00 GMTIf-None-MatchrequestConditional request (inverse of If-Match)
If-None-Match: "bfc1ef"Last-ModifiedresponseLast modification date of the resource
Last-Modified: Wed, 21 Oct 2015 07:28:00 GMTLocationresponseURL to redirect to
Location: https://example.com/new-pageMax-ForwardsrequestMax number of times message can be forwarded
Max-Forwards: 10OriginrequestOrigin of the request
Origin: https://example.comPragmageneralImplementation-specific directives
Pragma: no-cacheProxy-AuthorizationrequestCredentials for proxy authentication
Proxy-Authorization: Basic dXNlcjpwYXNzRangerequestRequest part of the resource
Range: bytes=0-499RefererrequestAddress of the previous page
Referer: https://example.com/pageRetry-AfterresponseHow long to wait before retrying
Retry-After: 120ServerresponseInformation about the server software
Server: nginx/1.18.0Set-CookieresponseSend cookies from server to client
Set-Cookie: id=a; Path=/; HttpOnly; SecureStrict-Transport-SecurityresponseForce HTTPS connections
Strict-Transport-Security: max-age=31536000; includeSubDomainsTErequestTransfer encodings the client can accept
TE: trailers, deflateTransfer-EncodinggeneralTransfer coding applied to the body
Transfer-Encoding: chunkedUpgradegeneralAsk to switch to a different protocol
Upgrade: websocketUser-AgentrequestInfo about the client application
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64)...VaryresponseWhich request headers affect the response
Vary: Accept-Encoding, OriginViageneralIntermediate proxies the message passed through
Via: 1.1 varnish, 1.1 cloudflareWWW-AuthenticateresponseAuthentication method for access
WWW-Authenticate: Bearer realm="api"X-Content-Type-OptionsresponsePrevent MIME type sniffing
X-Content-Type-Options: nosniffX-Frame-OptionsresponsePrevent clickjacking in iframes
X-Frame-Options: DENYX-Forwarded-ForrequestClient IP through proxies
X-Forwarded-For: 203.0.113.195, 70.41.3.18X-Forwarded-HostrequestOriginal host requested by the client
X-Forwarded-Host: example.comX-Forwarded-ProtorequestProtocol used by the client
X-Forwarded-Proto: httpsX-Request-IDgeneralUnique request identifier for tracing
X-Request-ID: f47ac10b-58cc-4372-a567-0e02b2c3d479X-XSS-ProtectionresponseXSS filter configuration (legacy)
X-XSS-Protection: 1; mode=blockAccess-Control-Allow-OriginresponseCORS: allowed origins
Access-Control-Allow-Origin: https://example.comAccess-Control-Allow-MethodsresponseCORS: allowed HTTP methods
Access-Control-Allow-Methods: GET, POST, PUT, DELETEAccess-Control-Allow-HeadersresponseCORS: allowed request headers
Access-Control-Allow-Headers: Content-Type, AuthorizationAccess-Control-Max-AgeresponseCORS: how long preflight results are cached
Access-Control-Max-Age: 86400