HTTP · Cookies, CORS and security headers
Answer a CORS preflight
The headers a server returns to an OPTIONS preflight request.
Access-Control-Allow-Methods: GET, POST
Access-Control-Allow-Headers: Content-Type, Authorization
Access-Control-Max-Age: 600
More cookies, cors and security headers commands
- Set a secure session cookie
- Allow a cross-origin site (CORS)
- Strict-Transport-Security: force HTTPS
- Content-Security-Policy: limit what loads
- X-Content-Type-Options: stop type guessing
- Block clickjacking
All cookies, cors and security headers commands · HTTP cheatsheet