server

The date and time that the message was sent.

date

type

description

charset

content-type

The length of the response body in octets (8-bit bytes).

content-length

Inform all caching mechanisms from server to client whether they may cache this object.

The time a browser should remember a site can only be accessed with https (seconds).

max-age

cache-control

The content security policy allows the server to determine what resources the user is allowed to load.

referrer

content-security-policy

location

Controls what referrer information is sent with requests.

referrer-policy

A cookie sent from the server to be set on the client

_bit

The client will only send the cookie when requesting from this domain.

Domain

Expires

set-cookie

Added by proxies to track a request through proxies and to avoid loops.

version

host

Indicate a resource should be loaded from a different server while still appearing to be loaded from this server.

service

alt-svc

Control options for the current connection and list of hop-by-hop response fields.

The client or server would like to close the connection.

connection

This and all future requests should be directed to the given URI. The request method can change.

Indicates that different content may be provided to different clients, depending on the vary header.

headers

vary

duplicate

Duplicates

An identifier for a specific version of a resource.

A weak tag is easier to generate and prevents byte range caching.

validator

etag

A HSTS Policy informing the HTTP client how long to cache the HTTPS only policy and whether this applies to subdomains.

Use Google's preloading strict transport security.

strict-transport-security

deny

x-frame-options

Prevents Internet Explorer from MIME-sniffing a response away from the declared content-type.

Block requests if type 'style' or 'script'.

x-content-type-options

x-xss-protection

Send the full referrer when performing a same origin request, and the origin when not.

Send the full referrer for a same origin request. Send the origin only for cross-domain requests where the protocol level is the same. Otherwise do not send the referrer.

default-src

Define what can be used in the base element.

base-uri

child-src

connect-src

font-src

Define what can be used as the target for forms.

form-action

Define valid parents for frame, iframe, embed, object, and applet.

frame-ancestors

frame-src

img-src

manifest-src

Define sources for audio, video, and track elements.

media-src

script-src

style-src

Treat insecure URLs as though they are secure.

Define sources for Worker, SharedWork, and ServiceWorker scripts.

worker-src

What partial content range types this server supports via byte serving.

accept-ranges

_gh_sess

The client will only send the cookie when requesting this path, or subdirectories, from the server.

Path

Prevents access to the cookie through JavaScript.

The cookie is only sent when requesting from a https domain.

Cookie is not sent on cross-site requests but is when following a link to the origin.

SameSite

_octo

logged_in

x-github-request-id

invalid

This response contains headers with invalid or incomplete values.

Standard response indicating a successful action. For GET requests this will be the resource, and for POST it will be the result of the action.

HTTP Headers

Summary

Details

`https://bit.ly/ver-gladiator-2-online`

`https://github.com/ver-gladiator-2-online-latino`