What is the difference between request and response headers?

Request headers are sent by the client (e.g. Accept, Authorization); response headers are sent by the server (e.g. Content-Type, Cache-Control). Some can appear in both.

What are CORS headers?

Access-Control-Allow-Origin and related headers control which origins may access a resource from the browser, enabling cross-origin requests safely.

How do I control caching?

Cache-Control (e.g. max-age, no-store), ETag, and Expires headers tell browsers and CDNs how long and whether to cache a response.

What are common security headers?

Content-Security-Policy, Strict-Transport-Security, X-Content-Type-Options, and X-Frame-Options help protect against common web attacks.

What is the Content-Type header?

It tells the recipient the media type of the body, such as application/json or text/html; charset=utf-8.

trysys.jp

Reference

HTTP Headers Reference

Essential HTTP headers for requests, responses, caching, CORS, and security. Click any card to copy.