HTTP 安全头指南
HTTP安全头指南：CSP、HSTS、X-Frame-Options。
加载工具中...
相关工具
关于此工具
HTTP安全头指南：CSP、HSTS、X-Frame-Options。
HTTP安全头指南：CSP、HSTS、X-Frame-Options。
HTTP安全头指南：CSP、HSTS、X-Frame-Options。
Media type of the resource
application/json; charset=utf-8Credentials for authentication
Bearer <token>Media types the client accepts
application/json, text/html, */*Caching directives for requests/responses
max-age=3600, publicControls resources the browser can load
default-src 'self'; script-src 'self'Prevents clickjacking
DENYForce HTTPS
max-age=31536000; includeSubDomainsPrevent MIME-type sniffing
nosniffAllowed origins for CORS
https://example.comVersion identifier for caching
"33a64df551425fcc55e4d42a148795d9f25f89d4"Redirect destination
https://example.com/new-pathSet HTTP cookies
session=abc123; HttpOnly; Secure; SameSite=StrictIdentify AJAX requests
XMLHttpRequestClient browser/agent info
Mozilla/5.0 (X11; Linux x86_64)...Controls referrer info sent
strict-origin-when-cross-origin