Header category
Security Policy
Response headers instructing the client to constrain itself — transport security, framing, script sources, sniffing, referrer leakage.
26 headers
108 provider declarations
| Header | Providers | Status | |
|---|---|---|---|
| X-Content-Type-Options | 33 | permanent | |
| Strict-Transport-Security | 33 | permanent | regulated |
| X-Frame-Options | 30 | permanent | |
| Content-Security-Policy | 4 | permanent | regulated |
| Expect-CT | 3 | deprecated | |
| Referrer-Policy | 2 | permanent | |
| NEL | 2 | permanent | |
| Public | 1 | obsoleted | |
| Permissions-Policy | — | provisional | regulated |
| Origin-Agent-Cluster | — | permanent | |
| Cross-Origin-Resource-Policy | — | permanent | |
| Cross-Origin-Opener-Policy-Report-Only | — | permanent | |
| Cross-Origin-Opener-Policy | — | permanent | |
| Cross-Origin-Embedder-Policy-Report-Only | — | permanent | |
| Cross-Origin-Embedder-Policy | — | permanent | |
| Content-Security-Policy-Report-Only | — | permanent | |
| Clear-Site-Data | — | permanent | regulated |
| Sec-Fetch-Storage-Access | — | provisional | |
| Sec-Fetch-Site | — | permanent | |
| Sec-Fetch-Mode | — | permanent | |
| Sec-Fetch-Dest | — | permanent | |
| Reporting-Endpoints | — | provisional | |
| Public-Key-Pins-Report-Only | — | permanent | |
| Public-Key-Pins | — | permanent | |
| PICS-Label | — | obsoleted | |
| Sec-Fetch-User | — | permanent |
All categories
Authentication Authorization & Scope Caching Conditional Requests & Concurrency Content Negotiation Representation Metadata Connection & Transport CORS Security Policy Privacy & Consent Rate Limiting & Quota Tracing & Correlation Idempotency & Reliability Versioning & Lifecycle Integrity & Signing Async & Long-Running Cost & Metering Agent & Bot Identity