added: more common HTTP headers suggestions

This commit is contained in:
tanish goyal
2024-01-03 20:31:28 +05:30
parent 47d5bc327d
commit f3e4832456

View File

@ -14,15 +14,21 @@ Map<String, String> headers = {
"Used in preflight requests during CORS to specify the headers that will be included in the actual request.", "Used in preflight requests during CORS to specify the headers that will be included in the actual request.",
"Access-Control-Request-Method": "Access-Control-Request-Method":
"Used in preflight requests during CORS to indicate the HTTP method that will be used in the actual request.", "Used in preflight requests during CORS to indicate the HTTP method that will be used in the actual request.",
"Accept-Language":
"Specifies the preferred natural language and locale for the response.",
"Authorization": "Authorization":
"Contains credentials for authenticating the client with the server.", "Contains credentials for authenticating the client with the server.",
"Authorization Bearer Token": "Often used for token-based authentication.", "Authorization Bearer Token": "Often used for token-based authentication.",
"Cache-Control": "Cache-Control":
"Provides directives for caching mechanisms in both requests and responses.", "Provides directives for caching mechanisms in both requests and responses.",
"Connection":
"Informs whether the connection stays open or close after the current transaction finishes.",
"Content-Disposition": "Content-Disposition":
"Specifies the presentation style (inline or attachment) of the response.", "Specifies the presentation style (inline or attachment) of the response.",
"Content-Encoding": "Content-Encoding":
"Indicates the encoding transformations that have been applied to the entity body of the response.", "Indicates the encoding transformations that have been applied to the entity body of the response.",
"Content-Length":
"Indicates the size of the message body sent to the recipient in bytes.",
"Content-Security-Policy": "Content-Security-Policy":
"Controls the sources from which content can be loaded on a web page to mitigate various types of attacks.", "Controls the sources from which content can be loaded on a web page to mitigate various types of attacks.",
"Content-Type": "Content-Type":
@ -34,6 +40,7 @@ Map<String, String> headers = {
"Controls which documents are allowed to open a new window or access the current window.", "Controls which documents are allowed to open a new window or access the current window.",
"Cross-Origin-Resource-Policy": "Cross-Origin-Resource-Policy":
"Controls how cross-origin requests for resources are handled.", "Controls how cross-origin requests for resources are handled.",
"Date": "Indicates the date and time at which the message was sent.",
"DNT": "DNT":
"Informs websites whether the user's preference is to opt out of online tracking.", "Informs websites whether the user's preference is to opt out of online tracking.",
"Expect": "Indicates certain expectations that need to be met by the server.", "Expect": "Indicates certain expectations that need to be met by the server.",
@ -50,6 +57,8 @@ Map<String, String> headers = {
"Used in conjunction with the Range header to conditionally request a partial resource.", "Used in conjunction with the Range header to conditionally request a partial resource.",
"If-Unmodified-Since": "If-Unmodified-Since":
"Used for conditional requests, allows the server to respond based on certain conditions.", "Used for conditional requests, allows the server to respond based on certain conditions.",
"Location":
"Indicates the URL a client should redirect to for further interaction.",
"Origin": "Specifies the origin of a cross-origin request.", "Origin": "Specifies the origin of a cross-origin request.",
"Range": "Range":
"Used to request only part of a resource, typically in the context of downloading large files.", "Used to request only part of a resource, typically in the context of downloading large files.",
@ -59,6 +68,7 @@ Map<String, String> headers = {
"Specifies how much information the browser should include in the Referer header when navigating to other pages.", "Specifies how much information the browser should include in the Referer header when navigating to other pages.",
"Retry-After": "Retry-After":
"Informs the client how long it should wait before making another request after a server has responded with a rate-limiting status code.", "Informs the client how long it should wait before making another request after a server has responded with a rate-limiting status code.",
"Server": "Indicates the software used by the origin server.",
"Strict-Transport-Security": "Strict-Transport-Security":
"Instructs the browser to always use HTTPS for the given domain.", "Instructs the browser to always use HTTPS for the given domain.",
"TE": "Specifies the transfer encodings that are acceptable to the client.", "TE": "Specifies the transfer encodings that are acceptable to the client.",
@ -67,10 +77,14 @@ Map<String, String> headers = {
"Via": "Via":
"Indicates intermediate proxies or gateways through which the request or response has passed.", "Indicates intermediate proxies or gateways through which the request or response has passed.",
"X-Api-Key": "Used to authenticate requests to an API with an API key.", "X-Api-Key": "Used to authenticate requests to an API with an API key.",
"X-Content-Type-Options":
"Used to prevent browsers from MIME-sniffing a response.",
"X-CSRF-Token": "X-CSRF-Token":
"Used for protection against Cross-Site Request Forgery (CSRF) attacks.", "Used for protection against Cross-Site Request Forgery (CSRF) attacks.",
"X-Forwarded-For": "X-Forwarded-For":
"Identifies the client's original IP address when behind a proxy or load balancer.", "Identifies the client's original IP address when behind a proxy or load balancer.",
"X-Frame-Options":
"Controls whether a webpage can be displayed within an iframe or other embedded frame elements.",
"X-Requested-With": "X-Requested-With":
"Indicates whether the request was made with JavaScript using XMLHttpRequest.", "Indicates whether the request was made with JavaScript using XMLHttpRequest.",
"X-XSS-Protection": "X-XSS-Protection":