HTTP

Tag

Response

49 resources tagged Response across methods, status codes, headers, cookies, guides, and glossary.

All Tags Search All Content
HTTP Headers

Accept-Ranges Header

Learn how the Accept-Ranges header tells clients whether your server supports partial content requests (byte ranges) for efficient downloads and streaming.

 HTTP Headers

Access-Control-Allow-Credentials Header

Learn how Access-Control-Allow-Credentials controls whether browsers expose responses when credentials (cookies, auth headers) are included in CORS requests.

 HTTP Headers

Access-Control-Allow-Headers Header

Learn how Access-Control-Allow-Headers specifies which custom HTTP headers can be used during cross-origin requests in CORS preflight responses.

 HTTP Headers

Access-Control-Allow-Methods Header

Learn how Access-Control-Allow-Methods specifies which HTTP methods are permitted for cross-origin requests in CORS preflight responses.

 HTTP Headers

Access-Control-Allow-Origin

Learn how Access-Control-Allow-Origin controls which origins can access resources in CORS. Covers wildcard, specific origin, and credential configurations.

 HTTP Headers

Access-Control-Max-Age Header

Learn how Access-Control-Max-Age specifies how long browsers can cache CORS preflight results. Reduce preflight requests and improve cross-origin performance.

 HTTP Headers

Age Header

Learn how the Age header indicates how long a response has been cached in seconds. Understand cache freshness calculations and CDN behavior.

 HTTP Headers

Authentication-Info Header

Learn how Authentication-Info provides additional authentication data in responses to successful requests. Covers digest authentication and session info.

 HTTP Headers

Cache-Control Header: Complete HTTP Caching Guide

Master the Cache-Control header. Learn how to control browser and CDN caching with max-age, no-cache, no-store, and other directives.

 HTTP Headers

Connection Header

Learn how the Connection header controls whether HTTP connections stay open (keep-alive) or close after each request. Optimize with persistent connections.

 HTTP Headers

Content-Disposition Header

Learn how the Content-Disposition header controls whether content displays inline or downloads as an attachment. Set custom filenames for file downloads.

 HTTP Headers

Content-Encoding

Learn how Content-Encoding specifies compression algorithms (gzip, br, deflate) used to encode response bodies. Reduce bandwidth and improve load times.

 HTTP Headers

Content-Language Header

Learn how the Content-Language header specifies the natural language(s) of response content. Understand language tags and internationalization best practices.

 HTTP Headers

Content-Length

Learn how Content-Length specifies the body size in bytes. Essential for progress indicators, connection management, and chunked transfer decisions.

 HTTP Headers

Content-Location Header

Learn how Content-Location indicates an alternate URL for returned content. Useful for content negotiation and identifying canonical resource locations.

 HTTP Headers

Content-Range Header

Learn how the Content-Range header indicates which portion of a resource is being sent in partial content (206) responses for range requests and streaming.

 HTTP Headers

Content-Security-Policy Header

Learn how Content-Security-Policy (CSP) defines security policies to prevent XSS, clickjacking, and code injection. Master CSP directives and best practices.

 HTTP Headers

Content-Type Header: Complete Guide to MIME Types

Learn how the Content-Type header works. Understand MIME types, charset encoding, and how to set the correct content type for APIs, forms, and file uploads.

 HTTP Headers

Cross-Origin-Embedder-Policy

Learn how Cross-Origin-Embedder-Policy (COEP) controls cross-origin resource loading. Required for SharedArrayBuffer and high-resolution timer access.

 HTTP Headers

Cross-Origin-Opener-Policy

Learn how Cross-Origin-Opener-Policy (COOP) isolates your browsing context from cross-origin documents. Required for SharedArrayBuffer and enhanced security.

 HTTP Headers

Cross-Origin-Resource-Policy

Learn how Cross-Origin-Resource-Policy (CORP) blocks no-cors cross-origin requests to protect resources from Spectre attacks and data leaks.

 HTTP Headers

Date Header

Learn how the Date header specifies when the HTTP message was originated by the server. Understand date formats and its role in caching and logging.

 HTTP Headers

Early-Hints

Learn how 103 Early Hints allows servers to send preload hints while preparing the main response. Improve page load performance with early resource loading.

 HTTP Headers

ETag

Learn how the ETag header provides a unique identifier for resource versions, enabling efficient cache validation and conditional requests to reduce bandwidth.

 HTTP Headers

Expires Header

Learn how the Expires header specifies when cached responses become stale. Understand date formats and when to use Expires vs Cache-Control for caching.

 HTTP Headers

Last-Modified

Learn how the Last-Modified header indicates when a resource was last changed. Enable efficient cache validation with If-Modified-Since conditional requests.

 HTTP Headers

Link Header

Learn how the Link header provides resource hints and enables preloading of CSS, fonts, and scripts to improve page load performance and user experience.

 HTTP Headers

Location

Learn how the Location header specifies redirect URLs or the location of newly created resources. Essential for 201, 301, 302, and other redirect responses.

 HTTP Headers

Performance-Timing

Learn about Performance-Timing, a non-standard header for exposing server-side performance metrics to clients. Understand its use cases and alternatives.

 HTTP Headers

Permissions-Policy Header

Learn how the Permissions-Policy header controls which browser features and APIs can be used in your site and embedded iframes. Enhance security and privacy.

 HTTP Headers

Proxy-Authenticate Header

Learn how the Proxy-Authenticate header challenges clients for credentials when accessing resources through a proxy. Understand proxy authentication schemes.

 HTTP Headers

Referrer-Policy Header

Learn how Referrer-Policy controls how much referrer information is sent with requests. Protect user privacy while maintaining analytics functionality.

 HTTP Headers

Refresh Header

Learn how the Refresh header instructs browsers to reload or redirect after a delay. Understand its use cases, limitations, and better alternatives.

 HTTP Headers

Retry-After

Learn how the Retry-After header tells clients how long to wait before retrying a request. Understand its use with 503, 429, and 301 status codes.

 HTTP Headers

Sec-WebSocket-Accept

Learn how the Sec-WebSocket-Accept header indicates server acceptance of a WebSocket connection upgrade. Understand the handshake process and key validation.

 HTTP Headers

Server-Timing Header

Learn how the Server-Timing header communicates server-side performance metrics to browsers. Analyze backend timing, database queries, and optimize performance.

 HTTP Headers

Set-Cookie

Learn how the Set-Cookie header instructs browsers to store cookies with attributes like HttpOnly, Secure, SameSite, and expiration settings.

 HTTP Headers

Strict-Transport-Security Header

Learn how Strict-Transport-Security (HSTS) forces browsers to only communicate over HTTPS, preventing protocol downgrade and man-in-the-middle attacks.

 HTTP Headers

Timing-Allow-Origin

Learn how the Timing-Allow-Origin header specifies which origins can access Resource Timing API data. Enable cross-origin performance monitoring securely.

 HTTP Headers

Transfer-Encoding Header

Learn how the Transfer-Encoding header specifies encoding formats like chunked transfer for streaming responses when content length is unknown beforehand.

 HTTP Headers

Vary

Learn how the Vary header specifies which request headers affect the response. Essential for proper cache differentiation and content negotiation.

 HTTP Headers

Warning Header

Learn about the deprecated Warning header that provided additional status information about message transformations. Understand why it was removed from HTTP.

 HTTP Headers

WWW-Authenticate

Learn how the WWW-Authenticate header specifies authentication methods required to access protected resources. Understand Basic, Bearer, and Digest schemes.

 HTTP Headers

X-Cache Header

Learn how the X-Cache header indicates cache hit or miss status from CDNs and proxies. Debug caching issues and verify CDN configuration with this header.

 HTTP Headers

X-Content-Type-Options Header

Learn how X-Content-Type-Options with nosniff prevents browsers from MIME-sniffing responses. Protect against XSS attacks from content type confusion.

 HTTP Headers

X-Frame-Options Header

Learn how X-Frame-Options prevents clickjacking attacks by controlling whether your site can be embedded in frames, iframes, or objects on other domains.

 HTTP Headers

X-RateLimit Headers

Learn how X-RateLimit headers inform API clients about rate limits, remaining requests, and reset times. Implement proper rate limiting in your applications.

 HTTP Headers

X-Response-Time

Learn how the X-Response-Time header indicates server processing time in milliseconds. Useful for performance monitoring and debugging slow requests.

 HTTP Headers

X-XSS-Protection Header

Deprecated header that enabled browser XSS filters to detect and block reflected cross-site scripting attacks.