List of HTTP header fields (English Wikipedia)

"core - Apache HTTP Server". Httpd.apache.org. Archived from the original on May 9, 2012. Retrieved March 13, 2012.
The Apache Software Foundation. "mod_proxy - Apache HTTP Server Version 2.2". Retrieved November 12, 2014.

att.com

developer.att.com

"ATT Device ID". Archived from the original on February 16, 2012. Retrieved January 14, 2012.

code.google.com

"Hosting - Google Chrome Extensions - Google Code". Retrieved June 14, 2012.

developershome.com

"WAP Profile". Retrieved January 14, 2012.

djangoproject.com

docs.djangoproject.com

"Django Cross Site Request Forgery protection". Django (web framework). Archived from the original on January 20, 2015. Retrieved January 20, 2015.

doi.org

"Field Parsing". Hypertext Transfer Protocol (HTTP/1.1): Message Syntax and Routing. June 2014. sec. 3.2.4. doi:10.17487/RFC7230. RFC 7230.
HTTP/2. June 2022. doi:10.17487/RFC9113. RFC 9113.
Peon, R.; Ruellan, H. (May 2015). "HPACK: Header Compression for HTTP/2". IETF. doi:10.17487/RFC7541. Retrieved December 13, 2021. {{cite journal}}: Cite journal requires |journal= (help)
"Field Names". HTTP Semantics. June 2022. sec. 5.1. doi:10.17487/RFC9110. RFC 9110.
"Methods: Overview". HTTP Semantics. June 2022. sec. 9.1. doi:10.17487/RFC9110. RFC 9110.
Internet Engineering Task Force (June 1, 2012). "RFC 6648". doi:10.17487/RFC6648. Retrieved November 12, 2012. {{cite journal}}: Cite journal requires |journal= (help)
"Comments". HTTP Semantics. June 2022. sec. 5.6.5. doi:10.17487/RFC9110. RFC 9110.
"Quality Values". HTTP Semantics. June 2022. sec. 12.4.2. doi:10.17487/RFC9110. RFC 9110.
RFC 3229. doi:10.17487/RFC3229.
"Connection header". HTTP Semantics. June 2022. sec. 7.6.1. doi:10.17487/RFC9110. RFC 9110.
"Connection-Specific Header Fields". HTTP/2. June 2022. sec. 8.2.2. doi:10.17487/RFC9113. RFC 9113.
"Changes from RFC 2616". Hypertext Transfer Protocol (HTTP/1.1): Semantics and Content. June 2014. sec. B. doi:10.17487/RFC7231. RFC 7231.
Petersson, A.; Nilsson, M. (June 2014). "Forwarded HTTP Extension: Introduction". IETF. doi:10.17487/RFC7239. Retrieved January 7, 2016. {{cite journal}}: Cite journal requires |journal= (help)
"Host and :authority". HTTP Semantics. June 2022. sec. 7.2. doi:10.17487/RFC9110. RFC 9110.
"Request Pseudo-Header Fields". HTTP/2. June 2022. sec. 8.3.1. doi:10.17487/RFC9113. RFC 9113.
"HTTP2-Settings Header Field". Hypertext Transfer Protocol Version 2 (HTTP/2). sec. 3.2.1. doi:10.17487/RFC7540. RFC 7540.
"Warning header". HTTP Caching. June 2022. sec. 5.5. doi:10.17487/RFC9111. RFC 9111.
Dusseault, L.; Snell, J. (2010). "RFC 5789". doi:10.17487/RFC5789. S2CID 42062521. Retrieved December 24, 2014. {{cite journal}}: Cite journal requires |journal= (help)
Nottingham, M.; McManus, P.; Reschke, J. (April 2016). "HTTP Alternative Services". IETF. doi:10.17487/RFC7838. Retrieved April 19, 2016. {{cite journal}}: Cite journal requires |journal= (help)
Nottingham, M.; McManus, P.; Reschke, J. (April 2016). "HTTP Alternative Services, section 3". IETF. doi:10.17487/RFC7838. Retrieved June 8, 2017. {{cite journal}}: Cite journal requires |journal= (help)
Reschke, J. (2011). "RFC 6266". doi:10.17487/RFC6266. Retrieved March 13, 2015. {{cite journal}}: Cite journal requires |journal= (help)
"Content-Language". HTTP Semantics. June 2022. sec. 8.5. doi:10.17487/RFC9110. RFC 9110.
"Retry-After". HTTP Semantics. June 2022. sec. 10.2.3. doi:10.17487/RFC9110. RFC 9110.
Ross, D.; Gondrom, T. (2013). "HTTP Header Field X-Frame-Options". IETF. doi:10.17487/RFC7034. Retrieved June 12, 2014. {{cite journal}}: Cite journal requires |journal= (help)
"Pragme". HTTP Caching. June 2022. sec. 5.4. doi:10.17487/RFC9111. RFC 9111.

eff.org

"Verizon Injecting Perma-Cookies to Track Mobile Customers, Bypassing Privacy Controls". Electronic Frontier Foundation. Retrieved January 19, 2014.

geekisp.com

Dave Steinberg (April 10, 2007). "How do I adjust my SSL site to work with GeekISP's loadbalancer?". Retrieved September 30, 2010.

github.com

"Define the HTTP Refresh header by annevk · Pull Request #2892 · whatwg/html". GitHub. August 9, 2017. Retrieved April 17, 2021.

heroku.com

devcenter.heroku.com

"HTTP Request IDs". devcenter.heroku.com. Retrieved March 22, 2022.

hilton.org.uk

Hilton, Peter (July 12, 2017). "Correlation IDs for microservices architectures - Peter Hilton". hilton.org.uk. Retrieved April 13, 2018.

iana.org

"Message Headers". Iana.org. June 11, 2014. Retrieved June 12, 2014.
"Message Headers". www.iana.org. Retrieved November 26, 2018.

ietf.org

datatracker.ietf.org

"Field Parsing". Hypertext Transfer Protocol (HTTP/1.1): Message Syntax and Routing. June 2014. sec. 3.2.4. doi:10.17487/RFC7230. RFC 7230.
HTTP/2. June 2022. doi:10.17487/RFC9113. RFC 9113.
"Field Names". HTTP Semantics. June 2022. sec. 5.1. doi:10.17487/RFC9110. RFC 9110.
"Methods: Overview". HTTP Semantics. June 2022. sec. 9.1. doi:10.17487/RFC9110. RFC 9110.
"Comments". HTTP Semantics. June 2022. sec. 5.6.5. doi:10.17487/RFC9110. RFC 9110.
"Quality Values". HTTP Semantics. June 2022. sec. 12.4.2. doi:10.17487/RFC9110. RFC 9110.
RFC 3229. doi:10.17487/RFC3229.
"Connection header". HTTP Semantics. June 2022. sec. 7.6.1. doi:10.17487/RFC9110. RFC 9110.
"Connection-Specific Header Fields". HTTP/2. June 2022. sec. 8.2.2. doi:10.17487/RFC9113. RFC 9113.
"Changes from RFC 2616". Hypertext Transfer Protocol (HTTP/1.1): Semantics and Content. June 2014. sec. B. doi:10.17487/RFC7231. RFC 7231.
"Host and :authority". HTTP Semantics. June 2022. sec. 7.2. doi:10.17487/RFC9110. RFC 9110.
"Request Pseudo-Header Fields". HTTP/2. June 2022. sec. 8.3.1. doi:10.17487/RFC9113. RFC 9113.
"HTTP2-Settings Header Field". Hypertext Transfer Protocol Version 2 (HTTP/2). sec. 3.2.1. doi:10.17487/RFC7540. RFC 7540.
"Warning header". HTTP Caching. June 2022. sec. 5.5. doi:10.17487/RFC9111. RFC 9111.
"Content-Language". HTTP Semantics. June 2022. sec. 8.5. doi:10.17487/RFC9110. RFC 9110.
"Retry-After". HTTP Semantics. June 2022. sec. 10.2.3. doi:10.17487/RFC9110. RFC 9110.
RFC 9110: HTTP Semantics
"Pragme". HTTP Caching. June 2022. sec. 5.4. doi:10.17487/RFC9111. RFC 9111.

tools.ietf.org

Peon, R.; Ruellan, H. (May 2015). "HPACK: Header Compression for HTTP/2". IETF. doi:10.17487/RFC7541. Retrieved December 13, 2021. {{cite journal}}: Cite journal requires |journal= (help)
Internet Engineering Task Force (June 1, 2012). "RFC 6648". doi:10.17487/RFC6648. Retrieved November 12, 2012. {{cite journal}}: Cite journal requires |journal= (help)
Petersson, A.; Nilsson, M. (June 2014). "Forwarded HTTP Extension: Introduction". IETF. doi:10.17487/RFC7239. Retrieved January 7, 2016. {{cite journal}}: Cite journal requires |journal= (help)
IETF Do Not Track: A Universal Third-Party Web Tracking Opt Out March 7, 2011
Dusseault, L.; Snell, J. (2010). "RFC 5789". doi:10.17487/RFC5789. S2CID 42062521. Retrieved December 24, 2014. {{cite journal}}: Cite journal requires |journal= (help)
Nottingham, M.; McManus, P.; Reschke, J. (April 2016). "HTTP Alternative Services". IETF. doi:10.17487/RFC7838. Retrieved April 19, 2016. {{cite journal}}: Cite journal requires |journal= (help)
Nottingham, M.; McManus, P.; Reschke, J. (April 2016). "HTTP Alternative Services, section 3". IETF. doi:10.17487/RFC7838. Retrieved June 8, 2017. {{cite journal}}: Cite journal requires |journal= (help)
Reschke, J. (2011). "RFC 6266". doi:10.17487/RFC6266. Retrieved March 13, 2015. {{cite journal}}: Cite journal requires |journal= (help)
Ross, D.; Gondrom, T. (2013). "HTTP Header Field X-Frame-Options". IETF. doi:10.17487/RFC7034. Retrieved June 12, 2014. {{cite journal}}: Cite journal requires |journal= (help)

jdebp.eu

de Boyne Pollard, Jonathan (2007). "The Proxy-Connection: header is a mistake in how some web browsers use HTTP". Retrieved January 16, 2018.

lessonslearned.org

"Checking known AT&T, Verizon, Sprint, Bell Canada & Vodacom Unique Identifier beacons". Retrieved January 19, 2014.

microsoft.com

mozilla.org

developer.mozilla.org

MDN contributors (March 3, 2023). "Sec-GPC". MDN Web Docs. Retrieved March 12, 2023.
"Expect-CT". Mozilla Developer Network. Retrieved July 23, 2021.
"NEL". Mozilla Developer Network. 2021. Retrieved May 18, 2021.
"CSP: report-to". Mozilla Developer Network. 2021. Retrieved May 18, 2021.
"Timing-Allow-Origin". Mozilla Developer Network. Retrieved January 25, 2018.
"Configuring servers for Ogg media". May 26, 2014. Retrieved January 3, 2015.

bugzilla.mozilla.org

"Clean up duration tracking and use mirroring for cross-thread access". Bugzilla@Mozilla. Retrieved February 9, 2024.

msdn.com

blogs.msdn.com

"Web Tracking Protection: Minimum Standards and Opportunities to Innovate". Retrieved March 24, 2011.
Eric Lawrence (September 3, 2008). "IE8 Security Part VI: Beta 2 Update". Retrieved September 28, 2010.
Eric Lawrence (July 2, 2008). "IE8 Security Part IV: The XSS Filter". Retrieved September 30, 2010.

opensocial.github.io

"OpenSocial Core API Server Specification 2.5.1". Retrieved October 8, 2014.

rapid7.com

blog.rapid7.com

"The Value of Correlation IDs". Rapid7 Blog. December 23, 2016. Retrieved April 13, 2018.

rfc-editor.org

"Public Key Pinning Extension for HTTP". IETF. Retrieved April 17, 2015.

sap.com

help.sap.com

"SAP Cross-Site Request Forgery Protection". SAP SE. Retrieved January 20, 2015.

semanticscholar.org

api.semanticscholar.org

Dusseault, L.; Snell, J. (2010). "RFC 5789". doi:10.17487/RFC5789. S2CID 42062521. Retrieved December 24, 2014. {{cite journal}}: Cite journal requires |journal= (help)

sidstamm.com

blog.sidstamm.com

"Try out the "Do Not Track" HTTP header". Retrieved January 31, 2011.

squid-cache.org

wiki.squid-cache.org

Amos Jeffries (July 2, 2010). "SquidFaq/ConfiguringSquid - Squid Web Proxy Wiki". Retrieved September 10, 2009.

stackoverflow.com

"What is the X-REQUEST-ID http header?". Retrieved March 20, 2022.
"Why does ASP.NET framework add the 'X-Powered-By:ASP.NET' HTTP Header in responses? - Stack Overflow". Retrieved March 20, 2022.

stoutner.com

"The "X-Requested-With" Header – Stoutner". October 31, 2022.

support.google.com

Indicate the canonical version of a URL by responding with the Link rel="canonical" HTTP header Retrieved: 2012-02-09

w3.org

"Cross-Origin Resource Sharing". Retrieved July 24, 2017.
"Upgrade Insecure Requests - W3C Candidate Recommendation". W3C. October 8, 2015. Retrieved January 14, 2016.
W3C Tracking Preference Expression (DNT), January 26, 2012
"W3C Trace Context". w3c.org. Retrieved June 19, 2024.
W3C P3P Work Suspended
"Content Security Policy Level 2". Retrieved August 2, 2014.
"Content Security Policy". W3C. 2012. Retrieved April 28, 2017.
"Permissions Policy". W3C. 2020. Retrieved May 1, 2021.

washingtonpost.com

Craig Timberg. "Verizon, AT&T tracking their users with 'supercookies'". The Washington Post. Retrieved January 19, 2014.

web.archive.org

"core - Apache HTTP Server". Httpd.apache.org. Archived from the original on May 9, 2012. Retrieved March 13, 2012.
"ATT Device ID". Archived from the original on February 16, 2012. Retrieved January 14, 2012.
"Django Cross Site Request Forgery protection". Django (web framework). Archived from the original on January 20, 2015. Retrieved January 20, 2015.
van Kesteren, Anne (August 26, 2016). "Fetch standard". WHATWG. Archived from the original on August 26, 2016. Retrieved August 26, 2016.

webtechsurvey.com

"X-Redirect-By HTTP response header". Retrieved May 29, 2021.

whatwg.org

fetch.spec.whatwg.org

van Kesteren, Anne (August 26, 2016). "Fetch standard". WHATWG. Archived from the original on August 26, 2016. Retrieved August 26, 2016.

html.spec.whatwg.org

"HTML Living Standard 4.2.5.3 Pragma directives, X-UA-Compatible state". WHATWG. March 12, 2021. Retrieved March 14, 2021. For meta elements with an http-equiv attribute in the X-UA-Compatible state, the content attribute must have a value that is an ASCII case-insensitive match for the string"IE=edge".

wicg.github.io

"Save Data API Living Document Draft Community Group Report 2.1.1. Save-Data Request Header Field". Web Platform Incubator Community Group. June 30, 2020. Retrieved March 5, 2021.

List of HTTP header fields (English Wikipedia)

amifloced.org

angularjs.org

docs.angularjs.org

apache.org

httpd.apache.org

att.com

developer.att.com

code.google.com

developershome.com

djangoproject.com

docs.djangoproject.com

doi.org

eff.org

geekisp.com

github.com

heroku.com

devcenter.heroku.com

hilton.org.uk

iana.org

ietf.org

datatracker.ietf.org

tools.ietf.org

jdebp.eu

lessonslearned.org

microsoft.com

technet.microsoft.com

msdn.microsoft.com

support.microsoft.com

mozilla.org

developer.mozilla.org

bugzilla.mozilla.org

msdn.com

blogs.msdn.com

opensocial.github.io

rapid7.com

blog.rapid7.com

rfc-editor.org

sap.com

help.sap.com

semanticscholar.org

api.semanticscholar.org

sidstamm.com

blog.sidstamm.com

squid-cache.org

wiki.squid-cache.org

stackoverflow.com

stoutner.com

support.google.com

w3.org

washingtonpost.com

web.archive.org

webtechsurvey.com

whatwg.org

fetch.spec.whatwg.org

html.spec.whatwg.org

wicg.github.io