The date and time that the message was sent.

date

server

type

description

charset

content-type

Inform all caching mechanisms from server to client whether they may cache this object.

May be stored by any cache but must be validated by the server.

cache-control

The content security policy allows the server to determine what resources the user is allowed to load.

content-security-policy

location

Control access to Federated Learning of Cohorts.

permissions-policy

Prevents Internet Explorer from MIME-sniffing a response away from the declared content-type.

Block requests if type 'style' or 'script'.

x-content-type-options

x-download-options

SAMEORIGIN

x-frame-options

x-gitlab-meta

Specifies if a cross-domain policy is allowed.

x-permitted-cross-domain-policies

x-request-id

x-runtime

Recommends the preferred rendering engine (often a backward-compatibility mode) to use to display the content.

x-ua-compatible

mode

x-xss-protection

A HSTS Policy informing the HTTP client how long to cache the HTTPS only policy and whether this applies to subdomains.

The time a browser should remember a site can only be accessed with https (seconds).

max-age

strict-transport-security

Controls what referrer information is sent with requests.

Send the full referrer for a same origin request. Send the origin only for cross-domain requests where the protocol level is the same. Otherwise do not send the referrer.

referrer-policy

A cookie sent from the server to be set on the client

_gitlab_session

The client will only send the cookie when requesting this path, or subdirectories, from the server.

path

expires

The cookie is only sent when requesting from a https domain.

Prevents access to the cookie through JavaScript.

Cookie sent with both cross-site and same-site requests..

SameSite

set-cookie

Control options for the current connection and list of hop-by-hop response fields.

The client or server would like to close the connection.

connection

The resource has temporarily been moved to another location. This is superseded by 303 and 307.

An identifier for a specific version of a resource.

A weak tag is easier to generate and prevents byte range caching.

validator

etag

preferred_language

Standard response indicating a successful action. For GET requests this will be the resource, and for POST it will be the result of the action.

HTTP Headers

Summary

Details

`https://gitlab.cekom.de/carsondeitz312/6512578/issues/1`

`https://gitlab.cekom.de/users/sign_in`