type

content-type

Inform all caching mechanisms from server to client whether they may cache this object.

May be stored by any cache but must be validated by the server.

The time a browser should remember a site can only be accessed with https (seconds).

max-age

cache-control

HTTP/1.0 backwards compatible cache handling.

Force requests to the origin server before releasing a cache.

pragma

The time at which the response is considered stale.

expires

The date and time that the message was sent.

date

location

The length of the response body in octets (8-bit bytes).

content-length

Isolate the document from cross-origin windows.

Allow document to be added to its openered browsing context group.

cross-origin-opener-policy

server

x-xss-protection

SAMEORIGIN

x-frame-options

Prevents Internet Explorer from MIME-sniffing a response away from the declared content-type.

Block requests if type 'style' or 'script'.

x-content-type-options

A cookie sent from the server to be set on the client

The client will only send the cookie when requesting this path, or subdirectories, from the server.

path

The client will only send the cookie when requesting from this domain.

domain

The cookie is only sent when requesting from a https domain.

Prevents access to the cookie through JavaScript.

Cookie sent with both cross-site and same-site requests..

SameSite

set-cookie

Indicate a resource should be loaded from a different server while still appearing to be loaded from this server.

service

alt-svc

Control options for the current connection and list of hop-by-hop response fields.

The client or server would like to close the connection.

connection

The resource has temporarily been moved to another location. This is superseded by 303 and 307.

description

charset

DENY

The content security policy allows the server to determine what resources the user is allowed to load.

script-src

Define sources for object, embed, and applet elements.

object-src

Define what can be used in the base element.

base-uri

report-uri

Define valid parents for frame, iframe, embed, object, and applet.

frame-ancestors

content-security-policy

Standard response indicating a successful action. For GET requests this will be the resource, and for POST it will be the result of the action.

HTTP Headers

Summary

Details

`https://lookerstudio.google.com/u/0/reporting/289dd2bd-080e-4601-bf06-c6e9871cc5e7/page/MIlIE`

`https://lookerstudio.google.com/reporting/289dd2bd-080e-4601-bf06-c6e9871cc5e7/page/MIlIE`