Access-Control-Request-Headers

在本文章中

语法
指令
示例
规范
浏览器兼容性
相关内容

请求首部 Access-Control-Request-Headers 出现于 preflight request （预检请求）中，用于通知服务器在真正的请求中会采用哪些请求首部。

Header type	Request header
Forbidden header name	yes

语法

Access-Control-Request-Headers: <header-name>, <header-name>, ...

指令

<header-name>: 在实际请求中将要包含的一系列 HTTP 首部，以逗号分隔。

示例

Access-Control-Request-Headers: X-PINGOTHER, Content-Type

规范

Specification	Status	Comment
Fetch Access-Control-Request-Headers	Living Standard	Initial definition.

Feature	Chrome	Firefox	Edge	Internet Explorer	Opera	Safari
Basic Support	4	3.5	12	10	12	4

Feature	Android	Chrome for Android	Edge mobile	Firefox for Android	IE mobile	Opera Android	iOS Safari
Basic Support	2.1	(Yes)	(Yes)	1.0	(Yes)	12	3.2

文档标签和贡献者

另见

HTTP
Guides:
Resources and URIs
1. Identifying resources on the Web
2. Data URIs
3. Introduction to MIME Types
4. Complete list of MIME Types
5. Choosing between www and non-www URLs
Basics of HTTP
1. Overview of HTTP
2. Evolution of HTTP
3. HTTP Messages
4. A typical HTTP session
5. Connection management in HTTP/1.x
HTTP security
1. Content Security Policy (CSP)
2. HTTP Public Key Pinning (HPKP)
3. HTTP Strict Transport Security (HSTS)
4. Cookie security
5. X-Content-Type-Options
6. X-Frame-Options
7. X-XSS-Protection
8. Mozilla web security guidelines
9. Mozilla Observatory
HTTP access control (CORS)
HTTP authentication
HTTP caching
HTTP compression
HTTP conditional requests
HTTP content negotiation
HTTP cookies
HTTP range requests
HTTP redirects
HTTP specifications
References:
HTTP headers
1. Accept
2. Accept-Charset
3. Accept-Encoding
4. Accept-Language
5. Accept-Ranges
6. Access-Control-Allow-Credentials
7. Access-Control-Allow-Headers [我来译!]
8. Access-Control-Allow-Methods [我来译!]
9. Access-Control-Allow-Origin
10. Access-Control-Expose-Headers [我来译!]
11. Access-Control-Max-Age [我来译!]
12. Access-Control-Request-Headers
13. Access-Control-Request-Method
14. Age
15. Allow
16. Authorization
17. Cache-Control
18. Connection
19. Content-Disposition
20. Content-Encoding [我来译!]
21. Content-Language [我来译!]
22. Content-Length [我来译!]
23. Content-Location [我来译!]
24. Content-Range
25. Content-Security-Policy
26. Content-Security-Policy-Report-Only [我来译!]
27. Content-Type
28. Cookie [我来译!]
29. Cookie2 [我来译!]
30. DNT [我来译!]
31. Date [我来译!]
32. ETag
33. Expect
34. Expires
35. Forwarded [我来译!]
36. From [我来译!]
37. Host
38. If-Match [我来译!]
39. If-Modified-Since [我来译!]
40. If-None-Match [我来译!]
41. If-Range
42. If-Unmodified-Since
43. Keep-Alive [我来译!]
44. Large-Allocation [我来译!]
45. Last-Modified [我来译!]
46. Location [我来译!]
47. Origin
48. Pragma [我来译!]
49. Proxy-Authenticate [我来译!]
50. Proxy-Authorization [我来译!]
51. Public-Key-Pins [我来译!]
52. Public-Key-Pins-Report-Only [我来译!]
53. Range
54. Referer [我来译!]
55. Referrer-Policy [我来译!]
56. Retry-After [我来译!]
57. Server [我来译!]
58. Set-Cookie [我来译!]
59. Set-Cookie2 [我来译!]
60. SourceMap [我来译!]
61. HTTP Strict Transport Security
62. TE
63. Tk [我来译!]
64. Trailer
65. Transfer-Encoding
66. Upgrade-Insecure-Requests [我来译!]
67. User-Agent [我来译!]
68. Vary
69. Via [我来译!]
70. WWW-Authenticate
71. Warning [我来译!]
72. X-Content-Type-Options [我来译!]
73. DNS 预读取
74. X-Forwarded-For [我来译!]
75. X-Forwarded-Host [我来译!]
76. X-Forwarded-Proto [我来译!]
77. X-Frame-Options 响应头
78. X-XSS-Protection
HTTP request methods
1. CONNECT [我来译!]
2. DELETE
3. GET
4. HEAD
5. OPTIONS
6. PATCH
7. POST
8. PUT
HTTP response status codes
1. 100 Continue
2. 101 Switching Protocol
3. 200 OK
4. 201 Created
5. 202 Accepted [我来译!]
6. 203 Non-Authoritative Information [我来译!]
7. 204 No Content
8. 205 Reset Content [我来译!]
9. 206 Partial Content
10. 300 Multiple Choices [我来译!]
11. 301 Moved Permanently
12. 302 Found
13. 303 See Other
14. 304 Not Modified
15. 307 Temporary Redirect
16. 308 Permanent Redirect
17. 400 Bad Request
18. 401 Unauthorized [我来译!]
19. 403 Forbidden [我来译!]
20. 404 Not Found [我来译!]
21. 405 Method Not Allowed
22. 406 Not Acceptable
23. 407 Proxy Authentication Required [我来译!]
24. 408 Request Timeout [我来译!]
25. 409 Conflict [我来译!]
26. 410 Gone
27. 411 Length Required [我来译!]
28. 412 Precondition Failed（先决条件失败）
29. 413 Payload Too Large [我来译!]
30. 414 URI Too Long [我来译!]
31. 415 Unsupported Media Type [我来译!]
32. 416 Range Not Satisfiable
33. 417 Expectation Failed
34. 426 Upgrade Required [我来译!]
35. 428 Precondition Required
36. 429 Too Many Requests
37. 431 Request Header Fields Too Large [我来译!]
38. 451 Unavailable For Legal Reasons [我来译!]
39. 500 Internal Server Error [我来译!]
40. 501 Not Implemented
41. 502 Bad Gateway [我来译!]
42. 503 Service Unavailable [我来译!]
43. 504 Gateway Timeout [我来译!]
44. 505 HTTP Version Not Supported [我来译!]
45. 511 Network Authentication Required [我来译!]
CSP directives
1. CSP: base-uri [我来译!]
2. CSP: block-all-mixed-content [我来译!]
3. CSP: child-src [我来译!]
4. CSP: connect-src [我来译!]
5. CSP: default-src [我来译!]
6. CSP: font-src [我来译!]
7. CSP: form-action [我来译!]
8. CSP: frame-ancestors [我来译!]
9. CSP: frame-src [我来译!]
10. CSP: img-src [我来译!]
11. CSP: manifest-src [我来译!]
12. CSP: media-src [我来译!]
13. CSP: object-src [我来译!]
14. CSP: plugin-types [我来译!]
15. CSP: referrer [我来译!]
16. CSP: report-uri [我来译!]
17. CSP: require-sri-for [我来译!]
18. CSP: sandbox [我来译!]
19. CSP: script-src [我来译!]
20. CSP: style-src [我来译!]
21. CSP: upgrade-insecure-requests [我来译!]
22. CSP: worker-src [我来译!]

Access-Control-Request-Headers

语法

指令

示例

规范

浏览器兼容性

相关内容

文档标签和贡献者