X-Frame-Options

The HTTP X-Frame-Options response header is used to place restrictions on how the client’s browser can display the page rendering.

Table of Contents

Usage
Takeaway
See also

Usage

The HTTP X-Frame-Options response header is sent by a server to indicate whether the client is allowed to display a rendered page using HTML tags , </em>, <em><embed></em>, or <em><object></em>. This is an additional layer of security that a website can employ to protect against certain types of attacks. For example, clickjacking attacks, which lead users to click on something other than what they expect, are prevented using this HTTP header.</p> <div class="admonition attention"> <p class="admonition-title">Note</p> <p>The <em>"X-"</em> naming convention for HTTP headers, <em>"X"</em> referring to <em>"experimental"</em>, has been <a href="https://datatracker.ietf.org/doc/html/rfc6648?utm_source=localhost%3A8080" referrerpolicy="no-referrer" rel="noopener noreferrer" target="_blank" title="deprecated">deprecated</a> and need to be transitioned to formal naming convention for HTTP headers.</p> </div> <p>This HTTP request header has directives <code>deny</code>, <code>sameorigin</code>, and <code>allow-from</code>.</p> <h3 id="deny">deny</h3> <p>The <code>deny</code> directive instructs the browser not to display the page in a frame under any circumstances.</p> <pre><code>X-Frame-Options: deny </code></pre> <h3 id="sameorigin">sameorigin</h3> <p>The <code>sameorigin</code> directive is less strict than <code>deny</code>. Using <code>sameorigin</code> implies that the client can display the page in a frame as long as the content is from the same site as the one that is serving the page.</p> <pre><code>X-Frame-Options: sameorigin </code></pre> <div class="admonition important"> <p class="admonition-title">Note</p> <p>The use of <code>sameorigin</code> is not restricted to the top level, parent, or the entire chain. However, unless all of the ancestors are of the same <a href="origins" title="origin">origin</a>, the usefulness of this directive is in question.</p> </div> <h3 id="allow-from-uri">allow-from URI</h3> <p>The <code>allow-from</code> directive is now obsolete and no longer be used. It once allowed browsers to display the content in a frame only for the specified <a href="uri" title="URI">URI</a>.</p> <pre><code>X-Frame-Options: allow-from https://example.re/ </code></pre> <p>In place of <code>allow-from</code>, the HTTP <a href="content-security-policy" title="Content-Security-Policy">Content-Security-Policy</a> header can be used with the frame-ancestors directive.</p> <h2 id="takeaway">Takeaway</h2> <p>The HTTP <mark>X-Frame-Options</mark> header is used to provide additional security by directing clients whether they are allowed to display content inside of a frame.</p> <h2 id="see-also">See also</h2> <ul> <li><a href="headers" title="HTTP headers">HTTP headers</a></li> </ul> <div class="improve"> <div class="last-updated text--small"> Last updated: <span>August 2, 2023</span> </div> </div> </div> <aside class="col-16 col-xl-4 offset-xl-1"> <article class="tool-card tool-card--white tool-card--button"> <h3 class="h3 tool-card__heading"> HTTP Status Tester </h3> <div class="text text--medium"> <p> Test live and from different countries the HTTP responses, redirect chains and status codes of one or multiple URLs. </p> </div> <a href="https://http.app/?ref=http.dev" class="button button--yellow button--small"> Try it now! </a> </article> <div class="related-content"> <input type="checkbox" hidden id="related-content"> <label for="related-content" class="related-content__title"> <svg width="12" height="7" viewBox="0 0 12 7" stroke="black" xmlns="http://www.w3.org/2000/svg"> <use xlink:href="/svg/icons.svg#chevron-down"></use> </svg> <span class="related-content__title-text"> Related content </span> </label> <div class="related-content__content"> <ol class="related-content__list text text--medium"> <li> <a href="/x-content-type-options"> X-Content-Type-Options </a> </li> <li> <a href="/x-dns-prefetch-control"> X-DNS-Prefetch-Control </a> </li> <li> <a href="/x-forwarded-for"> X-Forwarded-For </a> </li> <li> <a href="/x-forwarded-host"> X-Forwarded-Host </a> </li> <li> <a href="/x-forwarded-proto"> X-Forwarded-Proto </a> </li> <li> <a href="/x-powered-by"> X-Powered-By </a> </li> <li> <a href="/x-request-id"> X-Request-ID </a> </li> <li> <a href="/x-robots-tag"> X-Robots-Tag </a> </li> <li> <a href="/x-ua-compatible"> X-UA-Compatible </a> </li> <li> <a href="/x-xss-protection"> X-XSS-Protection </a> </li> </ol> </div> </div> <aside> </div> </div> </div> </main> <script>plausible("headers",{ props: { path: document.location.pathname } });</script> <footer class="footer"> <span id="footer"></span> <div class="footer__top"> <div class="container"> <nav> <div class="row"> <div class="col-8 col-lg-4"> <h4 class="h4 footer__heading footer__heading--yellow"> Status </h4> <ul class="footer__list"> <li class="footer__item"> <a class="footer__link" href="/status"> HTTP Status Codes overview </a> </li> <li class="footer__item"> <a class="footer__link" href="/100"> 100 Continue </a> </li> <li class="footer__item"> <a class="footer__link" href="/101"> 101 Switching Protocols </a> </li> <li class="footer__item"> <a class="footer__link" href="/102"> 102 Processing </a> </li> <li class="footer__item"> <a class="footer__link" href="/103"> 103 Early Hints </a> </li> <li class="footer__item"> <a class="footer__link" href="/200"> 200 OK </a> </li> <li class="footer__item"> <a class="footer__link" href="/201"> 201 Created </a> </li> <li class="footer__item"> <a class="footer__link" href="/202"> 202 Accepted </a> </li> <li class="footer__item"> <a class="footer__link" href="/203"> 203 Non-Authoritative Information </a> </li> <li class="footer__item"> <a class="footer__link" href="/204"> 204 No Content </a> </li> <li class="footer__item"> <a class="footer__link" href="/205"> 205 Reset Content </a> </li> <li class="footer__item"> <a class="footer__link" href="/206"> 206 Partial Content </a> </li> <li class="footer__item"> <a class="footer__link" href="/207"> 207 Multi-Status </a> </li> <li class="footer__item"> <a class="footer__link" href="/208"> 208 Already Reported </a> </li> <li class="footer__item"> <a class="footer__link" href="/218"> 218 This is fine </a> </li> <li class="footer__item"> <a class="footer__link" href="/226"> 226 IM Used </a> </li> <li class="footer__item"> <a class="footer__link" href="/300"> 300 Multiple Choices </a> </li> <li class="footer__item"> <a class="footer__link" href="/301"> 301 Moved Permanently </a> </li> <li class="footer__item"> <a class="footer__link" href="/302"> 302 Found </a> </li> <li class="footer__item"> <a class="footer__link" href="/303"> 303 See Other </a> </li> <li class="footer__item"> <a class="footer__link" href="/304"> 304 Not Modified </a> </li> <li class="footer__item"> <a class="footer__link" href="/305"> 305 Use Proxy </a> </li> <li class="footer__item"> <a class="footer__link" href="/306"> 306 Switch Proxy </a> </li> <li class="footer__item"> <a class="footer__link" href="/307"> 307 Temporary Redirect </a> </li> <li class="footer__item"> <a class="footer__link" href="/308"> 308 Permanent Redirect </a> </li> <li class="footer__item"> <a class="footer__link" href="/400"> 400 Bad Request </a> </li> <li class="footer__item"> <a class="footer__link" href="/401"> 401 Unauthorized </a> </li> <li class="footer__item"> <a class="footer__link" href="/402"> 402 Payment Required </a> </li> <li class="footer__item"> <a class="footer__link" href="/403"> 403 Forbidden </a> </li> <li class="footer__item"> <a class="footer__link" href="/404"> 404 Not Found </a> </li> <li class="footer__item"> <a class="footer__link" href="/405"> 405 Method Not Allowed </a> </li> <li class="footer__item"> <a class="footer__link" href="/406"> 406 Not Acceptable </a> </li> <li class="footer__item"> <a class="footer__link" href="/407"> 407 Proxy Authentication Required </a> </li> <li class="footer__item"> <a class="footer__link" href="/408"> 408 Request Timeout </a> </li> <li class="footer__item"> <a class="footer__link" href="/409"> 409 Conflict </a> </li> <li class="footer__item"> <a class="footer__link" href="/410"> 410 Gone </a> </li> <li class="footer__item"> <a class="footer__link" href="/411"> 411 Length Required </a> </li> <li class="footer__item"> <a class="footer__link" href="/412"> 412 Precondition Failed </a> </li> <li class="footer__item"> <a class="footer__link" href="/413"> 413 Payload Too Large </a> </li> <li class="footer__item"> <a class="footer__link" href="/414"> 414 URI Too Long </a> </li> <li class="footer__item"> <a class="footer__link" href="/415"> 415 Unsupported Media Type </a> </li> <li class="footer__item"> <a class="footer__link" href="/416"> 416 Range Not Satisfiable </a> </li> <li class="footer__item"> <a class="footer__link" href="/417"> 417 Expectation Failed </a> </li> <li class="footer__item"> <a class="footer__link" href="/418"> 418 I'm a teapot </a> </li> <li class="footer__item"> <a class="footer__link" href="/419"> 419 Page Expired </a> </li> <li class="footer__item"> <a class="footer__link" href="/420"> 420 Method Failure or Enhance your calm </a> </li> <li class="footer__item"> <a class="footer__link" href="/421"> 421 Misdirected Request </a> </li> <li class="footer__item"> <a class="footer__link" href="/422"> 422 Unprocessable Entity </a> </li> <li class="footer__item"> <a class="footer__link" href="/423"> 423 Locked </a> </li> <li class="footer__item"> <a class="footer__link" href="/424"> 424 Failed Dependency </a> </li> <li class="footer__item"> <a class="footer__link" href="/425"> 425 Too Early </a> </li> <li class="footer__item"> <a class="footer__link" href="/426"> 426 Upgrade Required </a> </li> <li class="footer__item"> <a class="footer__link" href="/428"> 428 Precondition Required </a> </li> <li class="footer__item"> <a class="footer__link" href="/429"> 429 Too Many Requests </a> </li> <li class="footer__item"> <a class="footer__link" href="/430"> 430 HTTP Status Code </a> </li> <li class="footer__item"> <a class="footer__link" href="/431"> 431 Request Header Fields Too Large </a> </li> <li class="footer__item"> <a class="footer__link" href="/440"> 440 Login Time-out </a> </li> <li class="footer__item"> <a class="footer__link" href="/444"> 444 No Response </a> </li> <li class="footer__item"> <a class="footer__link" href="/449"> 449 Retry With </a> </li> <li class="footer__item"> <a class="footer__link" href="/450"> 450 Blocked by Windows Parental Controls </a> </li> <li class="footer__item"> <a class="footer__link" href="/451"> 451 Unavailable For Legal Reasons </a> </li> <li class="footer__item"> <a class="footer__link" href="/460"> 460 Client closed connection prematurely </a> </li> <li class="footer__item"> <a class="footer__link" href="/463"> 463 Too many forwarded IP addresses </a> </li> <li class="footer__item"> <a class="footer__link" href="/464"> 464 Incompatible protocol </a> </li> <li class="footer__item"> <a class="footer__link" href="/494"> 494 Request header too large </a> </li> <li class="footer__item"> <a class="footer__link" href="/495"> 495 SSL Certificate Error </a> </li> <li class="footer__item"> <a class="footer__link" href="/496"> 496 SSL Certificate Required </a> </li> <li class="footer__item"> <a class="footer__link" href="/497"> 497 HTTP Request Sent to HTTPS Port </a> </li> <li class="footer__item"> <a class="footer__link" href="/498"> 498 Invalid Token </a> </li> <li class="footer__item"> <a class="footer__link" href="/499"> 499 Token Required or Client Closed Request </a> </li> <li class="footer__item"> <a class="footer__link" href="/500"> 500 Internal Server Error </a> </li> <li class="footer__item"> <a class="footer__link" href="/501"> 501 Not Implemented </a> </li> <li class="footer__item"> <a class="footer__link" href="/502"> 502 Bad Gateway </a> </li> <li class="footer__item"> <a class="footer__link" href="/503"> 503 Service Unavailable </a> </li> <li class="footer__item"> <a class="footer__link" href="/504"> 504 Gateway Timeout </a> </li> <li class="footer__item"> <a class="footer__link" href="/505"> 505 HTTP Version Not Supported </a> </li> <li class="footer__item"> <a class="footer__link" href="/506"> 506 Variant Also Negotiates </a> </li> <li class="footer__item"> <a class="footer__link" href="/507"> 507 Insufficient Storage </a> </li> <li class="footer__item"> <a class="footer__link" href="/508"> 508 Loop Detected </a> </li> <li class="footer__item"> <a class="footer__link" href="/509"> 509 Bandwidth Limit Exceeded </a> </li> <li class="footer__item"> <a class="footer__link" href="/510"> 510 Not Extended </a> </li> <li class="footer__item"> <a class="footer__link" href="/511"> 511 Network Authentication Required </a> </li> <li class="footer__item"> <a class="footer__link" href="/520"> 520 Web server is returning an unknown error </a> </li> <li class="footer__item"> <a class="footer__link" href="/521"> 521 Web server is down </a> </li> <li class="footer__item"> <a class="footer__link" href="/522"> 522 Connection timed out </a> </li> <li class="footer__item"> <a class="footer__link" href="/523"> 523 Origin is unreachable </a> </li> <li class="footer__item"> <a class="footer__link" href="/524"> 524 A Timeout Occurred </a> </li> <li class="footer__item"> <a class="footer__link" href="/525"> 525 SSL handshake failed </a> </li> <li class="footer__item"> <a class="footer__link" href="/526"> 526 Invalid SSL certificate </a> </li> <li class="footer__item"> <a class="footer__link" href="/527"> 527 Railgun Listener to Origin </a> </li> <li class="footer__item"> <a class="footer__link" href="/529"> 529 The service is overloaded </a> </li> <li class="footer__item"> <a class="footer__link" href="/530"> 530 Site Frozen </a> </li> <li class="footer__item"> <a class="footer__link" href="/561"> 561 Unauthorized </a> </li> <li class="footer__item"> <a class="footer__link" href="/598"> 598 Network read timeout error </a> </li> <li class="footer__item"> <a class="footer__link" href="/599"> 599 Network Connect Timeout Error </a> </li> <li class="footer__item"> <a class="footer__link" href="/999"> 999 Request Denied </a> </li> </ul> </div> <div class="col-8 col-lg-4"> <h4 class="h4 footer__heading footer__heading--violet"> Headers </h4> <ul class="footer__list"> <li class="footer__item"> <a class="footer__link" href="/headers"> HTTP Headers overview </a> </li> <li class="footer__item"> <a class="footer__link" href="/a-im"> A-IM </a> </li> <li class="footer__item"> <a class="footer__link" href="/accept"> Accept </a> </li> <li class="footer__item"> <a class="footer__link" href="/accept-ch"> Accept-CH </a> </li> <li class="footer__item"> <a class="footer__link" href="/accept-charset"> Accept-Charset </a> </li> <li class="footer__item"> <a class="footer__link" href="/accept-datetime"> Accept-Datetime </a> </li> <li class="footer__item"> <a class="footer__link" href="/accept-encoding"> Accept-Encoding </a> </li> <li class="footer__item"> <a class="footer__link" href="/accept-language"> Accept-Language </a> </li> <li class="footer__item"> <a class="footer__link" href="/accept-patch"> Accept-Patch </a> </li> <li class="footer__item"> <a class="footer__link" href="/accept-post"> Accept-Post </a> </li> <li class="footer__item"> <a class="footer__link" href="/accept-ranges"> Accept-Ranges </a> </li> <li class="footer__item"> <a class="footer__link" href="/access-control-allow-credentials"> Access-Control-Allow-Credentials </a> </li> <li class="footer__item"> <a class="footer__link" href="/access-control-allow-headers"> Access-Control-Allow-Headers </a> </li> <li class="footer__item"> <a class="footer__link" href="/access-control-allow-methods"> Access-Control-Allow-Methods </a> </li> <li class="footer__item"> <a class="footer__link" href="/access-control-allow-origin"> Access-Control-Allow-Origin </a> </li> <li class="footer__item"> <a class="footer__link" href="/access-control-expose-headers"> Access-Control-Expose-Headers </a> </li> <li class="footer__item"> <a class="footer__link" href="/access-control-max-age"> Access-Control-Max-Age </a> </li> <li class="footer__item"> <a class="footer__link" href="/access-control-request-headers"> Access-Control-Request-Headers </a> </li> <li class="footer__item"> <a class="footer__link" href="/access-control-request-method"> Access-Control-Request-Method </a> </li> <li class="footer__item"> <a class="footer__link" href="/age"> Age </a> </li> <li class="footer__item"> <a class="footer__link" href="/allow"> Allow </a> </li> <li class="footer__item"> <a class="footer__link" href="/alt-svc"> Alt-Svc </a> </li> <li class="footer__item"> <a class="footer__link" href="/authorization"> Authorization </a> </li> <li class="footer__item"> <a class="footer__link" href="/cache-control"> Cache-Control </a> </li> <li class="footer__item"> <a class="footer__link" href="/clear-site-data"> Clear-Site-Data </a> </li> <li class="footer__item"> <a class="footer__link" href="/connection"> Connection </a> </li> <li class="footer__item"> <a class="footer__link" href="/content-disposition"> Content-Disposition </a> </li> <li class="footer__item"> <a class="footer__link" href="/content-encoding"> Content-Encoding </a> </li> <li class="footer__item"> <a class="footer__link" href="/content-language"> Content-Language </a> </li> <li class="footer__item"> <a class="footer__link" href="/content-length"> Content-Length </a> </li> <li class="footer__item"> <a class="footer__link" href="/content-location"> Content-Location </a> </li> <li class="footer__item"> <a class="footer__link" href="/content-range"> Content-Range </a> </li> <li class="footer__item"> <a class="footer__link" href="/content-security-policy"> Content-Security-Policy </a> </li> <li class="footer__item"> <a class="footer__link" href="/content-security-policy-report-only"> Content-Security-Policy-Report-Only </a> </li> <li class="footer__item"> <a class="footer__link" href="/content-type"> Content-Type </a> </li> <li class="footer__item"> <a class="footer__link" href="/cookie"> Cookie </a> </li> <li class="footer__item"> <a class="footer__link" href="/cross-origin-embedder-policy"> Cross-Origin-Embedder-Policy </a> </li> <li class="footer__item"> <a class="footer__link" href="/cross-origin-opener-policy"> Cross-Origin-Opener-Policy </a> </li> <li class="footer__item"> <a class="footer__link" href="/cross-origin-resource-policy"> Cross-Origin-Resource-Policy </a> </li> <li class="footer__item"> <a class="footer__link" href="/date"> Date </a> </li> <li class="footer__item"> <a class="footer__link" href="/delta-base"> Delta-Base </a> </li> <li class="footer__item"> <a class="footer__link" href="/device-memory"> Device-Memory </a> </li> <li class="footer__item"> <a class="footer__link" href="/digest"> Digest </a> </li> <li class="footer__item"> <a class="footer__link" href="/etag"> ETag </a> </li> <li class="footer__item"> <a class="footer__link" href="/expect"> Expect </a> </li> <li class="footer__item"> <a class="footer__link" href="/expect-ct"> Expect-CT </a> </li> <li class="footer__item"> <a class="footer__link" href="/expires"> Expires </a> </li> <li class="footer__item"> <a class="footer__link" href="/forwarded"> Forwarded </a> </li> <li class="footer__item"> <a class="footer__link" href="/from"> From </a> </li> <li class="footer__item"> <a class="footer__link" href="/host"> Host </a> </li> <li class="footer__item"> <a class="footer__link" href="/http2-settings"> HTTP2-Settings </a> </li> <li class="footer__item"> <a class="footer__link" href="/if-match"> If-Match </a> </li> <li class="footer__item"> <a class="footer__link" href="/if-modified-since"> If-Modified-Since </a> </li> <li class="footer__item"> <a class="footer__link" href="/if-none-match"> If-None-Match </a> </li> <li class="footer__item"> <a class="footer__link" href="/if-range"> If-Range </a> </li> <li class="footer__item"> <a class="footer__link" href="/if-unmodified-since"> If-Unmodified-Since </a> </li> <li class="footer__item"> <a class="footer__link" href="/im"> IM </a> </li> <li class="footer__item"> <a class="footer__link" href="/keep-alive"> Keep-Alive </a> </li> <li class="footer__item"> <a class="footer__link" href="/last-modified"> Last-Modified </a> </li> <li class="footer__item"> <a class="footer__link" href="/link"> Link </a> </li> <li class="footer__item"> <a class="footer__link" href="/location"> Location </a> </li> <li class="footer__item"> <a class="footer__link" href="/max-forwards"> Max-Forwards </a> </li> <li class="footer__item"> <a class="footer__link" href="/nel"> NEL </a> </li> <li class="footer__item"> <a class="footer__link" href="/origin"> Origin </a> </li> <li class="footer__item"> <a class="footer__link" href="/permissions-policy"> Permissions-Policy </a> </li> <li class="footer__item"> <a class="footer__link" href="/pragma"> Pragma </a> </li> <li class="footer__item"> <a class="footer__link" href="/prefer"> Prefer </a> </li> <li class="footer__item"> <a class="footer__link" href="/proxy-authenticate"> Proxy-Authenticate </a> </li> <li class="footer__item"> <a class="footer__link" href="/proxy-authorization"> Proxy-Authorization </a> </li> <li class="footer__item"> <a class="footer__link" href="/purpose"> Purpose </a> </li> <li class="footer__item"> <a class="footer__link" href="/range"> Range </a> </li> <li class="footer__item"> <a class="footer__link" href="/referer"> Referer </a> </li> <li class="footer__item"> <a class="footer__link" href="/referrer-policy"> Referrer-Policy </a> </li> <li class="footer__item"> <a class="footer__link" href="/retry-after"> Retry-After </a> </li> <li class="footer__item"> <a class="footer__link" href="/save-data"> Save-Data </a> </li> <li class="footer__item"> <a class="footer__link" href="/sec-fetch-dest"> Sec-Fetch-Dest </a> </li> <li class="footer__item"> <a class="footer__link" href="/sec-fetch-mode"> Sec-Fetch-Mode </a> </li> <li class="footer__item"> <a class="footer__link" href="/sec-fetch-site"> Sec-Fetch-Site </a> </li> <li class="footer__item"> <a class="footer__link" href="/sec-fetch-user"> Sec-Fetch-User </a> </li> <li class="footer__item"> <a class="footer__link" href="/sec-websocket-accept"> Sec-WebSocket-Accept </a> </li> <li class="footer__item"> <a class="footer__link" href="/server"> Server </a> </li> <li class="footer__item"> <a class="footer__link" href="/server-timing"> Server-Timing </a> </li> <li class="footer__item"> <a class="footer__link" href="/set-cookie"> Set-Cookie </a> </li> <li class="footer__item"> <a class="footer__link" href="/sourcemap"> SourceMap </a> </li> <li class="footer__item"> <a class="footer__link" href="/strict-transport-security"> Strict-Transport-Security </a> </li> <li class="footer__item"> <a class="footer__link" href="/te"> TE </a> </li> <li class="footer__item"> <a class="footer__link" href="/timing-allow-origin"> Timing-Allow-Origin </a> </li> <li class="footer__item"> <a class="footer__link" href="/trailer"> Trailer </a> </li> <li class="footer__item"> <a class="footer__link" href="/transfer-encoding"> Transfer-Encoding </a> </li> <li class="footer__item"> <a class="footer__link" href="/upgrade"> Upgrade </a> </li> <li class="footer__item"> <a class="footer__link" href="/upgrade-insecure-requests"> Upgrade-Insecure-Requests </a> </li> <li class="footer__item"> <a class="footer__link" href="/user-agent"> User-Agent </a> </li> <li class="footer__item"> <a class="footer__link" href="/vary"> Vary </a> </li> <li class="footer__item"> <a class="footer__link" href="/via"> Via </a> </li> <li class="footer__item"> <a class="footer__link" href="/want-digest"> Want-Digest </a> </li> <li class="footer__item"> <a class="footer__link" href="/warning"> Warning </a> </li> <li class="footer__item"> <a class="footer__link" href="/www-authenticate"> WWW-Authenticate </a> </li> <li class="footer__item"> <a class="footer__link" href="/x-content-type-options"> X-Content-Type-Options </a> </li> <li class="footer__item"> <a class="footer__link" href="/x-dns-prefetch-control"> X-DNS-Prefetch-Control </a> </li> <li class="footer__item"> <a class="footer__link" href="/x-forwarded-for"> X-Forwarded-For </a> </li> <li class="footer__item"> <a class="footer__link" href="/x-forwarded-host"> X-Forwarded-Host </a> </li> <li class="footer__item"> <a class="footer__link" href="/x-forwarded-proto"> X-Forwarded-Proto </a> </li> <li class="footer__item"> <a class="footer__link" href="/x-frame-options"> X-Frame-Options </a> </li> <li class="footer__item"> <a class="footer__link" href="/x-powered-by"> X-Powered-By </a> </li> <li class="footer__item"> <a class="footer__link" href="/x-request-id"> X-Request-ID </a> </li> <li class="footer__item"> <a class="footer__link" href="/x-robots-tag"> X-Robots-Tag </a> </li> <li class="footer__item"> <a class="footer__link" href="/x-ua-compatible"> X-UA-Compatible </a> </li> <li class="footer__item"> <a class="footer__link" href="/x-xss-protection"> X-XSS-Protection </a> </li> </ul> </div> <div class="col-8 col-lg-4"> <h4 class="h4 footer__heading footer__heading--light-green"> Methods </h4> <ul class="footer__list"> <li class="footer__item"> <a class="footer__link" href="/methods"> HTTP Methods overview </a> </li> <li class="footer__item"> <a class="footer__link" href="/connect"> CONNECT </a> </li> <li class="footer__item"> <a class="footer__link" href="/delete"> DELETE </a> </li> <li class="footer__item"> <a class="footer__link" href="/get"> GET </a> </li> <li class="footer__item"> <a class="footer__link" href="/head"> HEAD </a> </li> <li class="footer__item"> <a class="footer__link" href="/options"> OPTIONS </a> </li> <li class="footer__item"> <a class="footer__link" href="/patch"> PATCH </a> </li> <li class="footer__item"> <a class="footer__link" href="/post"> POST </a> </li> <li class="footer__item"> <a class="footer__link" href="/put"> PUT </a> </li> <li class="footer__item"> <a class="footer__link" href="/trace"> TRACE </a> </li> </ul> <h4 class="h4 footer__heading footer__heading--orange"> HTTP Testing Tools </h4> <ul class="footer__list"> <li class="footer__item"> <a class="footer__link" href="https://http.app/?ref=http.dev"> HTTP Status Tester </a> </li> <li class="footer__item"> <a class="footer__link" href="/compression/test"> HTTP Compression Tester </a> </li> <li class="footer__item"> <a class="footer__link" href="/2/test"> HTTP/2 Tester </a> </li> <li class="footer__item"> <a class="footer__link" href="/url/parse"> URL Parser </a> </li> </ul> </div> <div class="col-8 col-lg-4"> <h4 class="h4 footer__heading footer__heading--brown"> HTTP Specifications </h4> <ul class="footer__list"> <li class="footer__item"> <a class="footer__link" href="/0.9"> HTTP/0.9 </a> </li> <li class="footer__item"> <a class="footer__link" href="/1.0"> HTTP/1.0 </a> </li> <li class="footer__item"> <a class="footer__link" href="/1.1"> HTTP/1.1 </a> </li> <li class="footer__item"> <a class="footer__link" href="/2"> HTTP/2 </a> </li> <li class="footer__item"> <a class="footer__link" href="/3"> HTTP/3 </a> </li> <li class="footer__item"> <a class="footer__link" href="/authentication"> HTTP Authentication </a> </li> <li class="footer__item"> <a class="footer__link" href="/caching"> HTTP Caching </a> </li> <li class="footer__item"> <a class="footer__link" href="/client-hints"> Client Hints </a> </li> <li class="footer__item"> <a class="footer__link" href="/compression"> HTTP Compression </a> </li> <li class="footer__item"> <a class="footer__link" href="/conditional-requests"> HTTP Conditional Requests </a> </li> <li class="footer__item"> <a class="footer__link" href="/content-negotiation"> HTTP Content Negotiation </a> </li> <li class="footer__item"> <a class="footer__link" href="/cookies"> HTTP Cookies </a> </li> <li class="footer__item"> <a class="footer__link" href="/cors"> Cross-Origin Resource Sharing (CORS) </a> </li> <li class="footer__item"> <a class="footer__link" href="/data-url"> Data URLs </a> </li> <li class="footer__item"> <a class="footer__link" href="/explained"> HTTP Explained </a> </li> <li class="footer__item"> <a class="footer__link" href="/hsts"> HTTP Strict Transport Security </a> </li> <li class="footer__item"> <a class="footer__link" href="/http-connection"> HTTP Connection </a> </li> <li class="footer__item"> <a class="footer__link" href="/https"> HyperText Transfer Protocol Secure (HTTPS) </a> </li> <li class="footer__item"> <a class="footer__link" href="/"> HyperText Transfer Protocol (HTTP) </a> </li> <li class="footer__item"> <a class="footer__link" href="/origins"> Origins </a> </li> <li class="footer__item"> <a class="footer__link" href="/percent-encoding"> Percent-Encoding </a> </li> <li class="footer__item"> <a class="footer__link" href="/protocol-upgrade"> HTTP Protocol Upgrade Mechanism </a> </li> <li class="footer__item"> <a class="footer__link" href="/punycode"> Punycode </a> </li> <li class="footer__item"> <a class="footer__link" href="/range-request"> HTTP Range Request </a> </li> <li class="footer__item"> <a class="footer__link" href="/redirects"> HTTP Redirections </a> </li> <li class="footer__item"> <a class="footer__link" href="/session"> A typical HTTP session </a> </li> <li class="footer__item"> <a class="footer__link" href="/soft404"> Soft 404s </a> </li> <li class="footer__item"> <a class="footer__link" href="/uri"> Uniform Resource Identifier (URI) </a> </li> <li class="footer__item"> <a class="footer__link" href="/url"> Uniform Resource Locator (URL) </a> </li> <li class="footer__item"> <a class="footer__link" href="/urn"> Uniform Resource Name (URN) </a> </li> <li class="footer__item"> <a class="footer__link" href="/webdav"> WebDAV </a> </li> <li class="footer__item"> <a class="footer__link" href="/ws"> WebSocket </a> </li> <li class="footer__item"> <a class="footer__link" href="/wss"> Encrypted WebSocket </a> </li> </ul> </div> </div> </nav> </div> </div> <div class="footer__bottom"> <div class="container footer__bottom-container"> <a aria-label="Back to top" class="footer__to-top" href="#"> <svg width="14" height="8" stroke="white" xmlns="http://www.w3.org/2000/svg"> <use xlink:href="/svg/icons.svg#chevron-up-white"></use> </svg> </a> <div class="text text--small"> <p> Made with <span class="footer__bottom-heart">♥</span> by SEO Expert <a rel="noopener" href="https://fili.com/?ref=http.dev">Fili</a> <span class="footer__bottom-text">© 2022 - 2024 Licensed under <a onclick="window.open('http://creativecommons.org/licenses/by-nc-nd/4.0/')">CC BY-NC-ND 4.0</a></span> <span class="footer__bottom-load"></span> </p> </div> </div> </div> </footer> <script src="/js/clipboard.min.js" type="text/javascript" defer></script> <script src="/js/cb.min.js?v=5mp54eyg" type="text/javascript" defer></script> <script src="/js/instantpage.min.js" type="text/javascript" defer></script> <script src="/js/app.min.js?v=5mp54eyg" type="text/javascript" defer></script> <script type="text/javascript"> window.addEventListener('load',()=>{var loadTime=document.getElementsByClassName('footer__bottom-load');window.performance=window.performance||window.mozPerformance||window.msPerformance||window.webkitPerformance||{};var e=performance.timing||{};var duration=(e.loadEventStart-e.navigationStart)/1000;;[].forEach.call(loadTime,(el)=>{el.innerText=`This page loaded in ${duration.toFixed(2)}s`})})</script> <noscript> <style> .status__expand, .header__search-button, .code-snippet .copy-btn, .share-block .copy-btn, .footer__bottom-load { display: none; } .share-block .form-group input { padding-right: 1rem; } </style> </noscript> </body> </html>