mirror of
https://github.com/foss42/apidash.git
synced 2025-05-22 16:57:07 +08:00
added: more common HTTP headers suggestions
This commit is contained in:
@ -14,15 +14,21 @@ Map<String, String> headers = {
|
||||
"Used in preflight requests during CORS to specify the headers that will be included in the actual request.",
|
||||
"Access-Control-Request-Method":
|
||||
"Used in preflight requests during CORS to indicate the HTTP method that will be used in the actual request.",
|
||||
"Accept-Language":
|
||||
"Specifies the preferred natural language and locale for the response.",
|
||||
"Authorization":
|
||||
"Contains credentials for authenticating the client with the server.",
|
||||
"Authorization Bearer Token": "Often used for token-based authentication.",
|
||||
"Cache-Control":
|
||||
"Provides directives for caching mechanisms in both requests and responses.",
|
||||
"Connection":
|
||||
"Informs whether the connection stays open or close after the current transaction finishes.",
|
||||
"Content-Disposition":
|
||||
"Specifies the presentation style (inline or attachment) of the response.",
|
||||
"Content-Encoding":
|
||||
"Indicates the encoding transformations that have been applied to the entity body of the response.",
|
||||
"Content-Length":
|
||||
"Indicates the size of the message body sent to the recipient in bytes.",
|
||||
"Content-Security-Policy":
|
||||
"Controls the sources from which content can be loaded on a web page to mitigate various types of attacks.",
|
||||
"Content-Type":
|
||||
@ -34,6 +40,7 @@ Map<String, String> headers = {
|
||||
"Controls which documents are allowed to open a new window or access the current window.",
|
||||
"Cross-Origin-Resource-Policy":
|
||||
"Controls how cross-origin requests for resources are handled.",
|
||||
"Date": "Indicates the date and time at which the message was sent.",
|
||||
"DNT":
|
||||
"Informs websites whether the user's preference is to opt out of online tracking.",
|
||||
"Expect": "Indicates certain expectations that need to be met by the server.",
|
||||
@ -50,6 +57,8 @@ Map<String, String> headers = {
|
||||
"Used in conjunction with the Range header to conditionally request a partial resource.",
|
||||
"If-Unmodified-Since":
|
||||
"Used for conditional requests, allows the server to respond based on certain conditions.",
|
||||
"Location":
|
||||
"Indicates the URL a client should redirect to for further interaction.",
|
||||
"Origin": "Specifies the origin of a cross-origin request.",
|
||||
"Range":
|
||||
"Used to request only part of a resource, typically in the context of downloading large files.",
|
||||
@ -59,6 +68,7 @@ Map<String, String> headers = {
|
||||
"Specifies how much information the browser should include in the Referer header when navigating to other pages.",
|
||||
"Retry-After":
|
||||
"Informs the client how long it should wait before making another request after a server has responded with a rate-limiting status code.",
|
||||
"Server": "Indicates the software used by the origin server.",
|
||||
"Strict-Transport-Security":
|
||||
"Instructs the browser to always use HTTPS for the given domain.",
|
||||
"TE": "Specifies the transfer encodings that are acceptable to the client.",
|
||||
@ -67,10 +77,14 @@ Map<String, String> headers = {
|
||||
"Via":
|
||||
"Indicates intermediate proxies or gateways through which the request or response has passed.",
|
||||
"X-Api-Key": "Used to authenticate requests to an API with an API key.",
|
||||
"X-Content-Type-Options":
|
||||
"Used to prevent browsers from MIME-sniffing a response.",
|
||||
"X-CSRF-Token":
|
||||
"Used for protection against Cross-Site Request Forgery (CSRF) attacks.",
|
||||
"X-Forwarded-For":
|
||||
"Identifies the client's original IP address when behind a proxy or load balancer.",
|
||||
"X-Frame-Options":
|
||||
"Controls whether a webpage can be displayed within an iframe or other embedded frame elements.",
|
||||
"X-Requested-With":
|
||||
"Indicates whether the request was made with JavaScript using XMLHttpRequest.",
|
||||
"X-XSS-Protection":
|
||||
|
Reference in New Issue
Block a user