HTTP 보안 헤더 가이드
HTTP 보안 헤더 가이드: CSP, HSTS, X-Frame-Options.
도구 로딩 중...
관련 도구
이 도구에 대해
HTTP 보안 헤더 가이드: CSP, HSTS, X-Frame-Options.
HTTP 보안 헤더 가이드: CSP, HSTS, X-Frame-Options.
HTTP 보안 헤더 가이드: CSP, HSTS, X-Frame-Options.
Media type of the resource
application/json; charset=utf-8Credentials for authentication
Bearer <token>Media types the client accepts
application/json, text/html, */*Caching directives for requests/responses
max-age=3600, publicControls resources the browser can load
default-src 'self'; script-src 'self'Prevents clickjacking
DENYForce HTTPS
max-age=31536000; includeSubDomainsPrevent MIME-type sniffing
nosniffAllowed origins for CORS
https://example.comVersion identifier for caching
"33a64df551425fcc55e4d42a148795d9f25f89d4"Redirect destination
https://example.com/new-pathSet HTTP cookies
session=abc123; HttpOnly; Secure; SameSite=StrictIdentify AJAX requests
XMLHttpRequestClient browser/agent info
Mozilla/5.0 (X11; Linux x86_64)...Controls referrer info sent
strict-origin-when-cross-origin