HTTP参考手册

标题 | Headers

Access-Control-Allow-Origin响应 header 指示是否该响应可以与具有给定资源共享原点。

Header type	Response header
Forbidden header name	no

Access-Control-Allow-Origin: *
Access-Control-Allow-Origin: <origin>

* 对于没有凭据的请求，服务器可以指定“*”作为通配符，从而允许任何来源访问资源。<origin> 指定可以访问资源的 URI 。

要允许任何资源访问您的资源，您可以指定：

Access-Control-Allow-Origin: *

要允许https://developer.mozilla.org访问您的资源，您可以指定：

Access-Control-Allow-Origin: https://developer.mozilla.org

如果服务器指定了原始主机而不是“ *”，那么它还必须包含Origin在Vary响应 header 中，以向客户机指出服务器响应将根据Origin请求 header 的值而有所不同。

Access-Control-Allow-Origin: https://developer.mozilla.org
Vary: Origin

Specification	Status	Comment
FetchThe definition of 'Access-Control-Allow-Origin' in that specification.	Living Standard	Initial definition.

Feature	Chrome	Edge	Firefox	Internet Explorer	Opera	Safari
Basic Support	4	12	3.5	10	12	4

Feature	Android	Chrome for Android	Edge mobile	Firefox for Android	IE mobile	Opera Android	iOS Safari
Basic Support	2.1	(Yes)	(Yes)	1.0	(Yes)	12	3.2

1.Accept
2.Accept-Charset
3.Accept-Encoding
4.Accept-Language
5.Accept-Ranges
6.Access-Control-Allow-Credentials
7.Access-Control-Allow-Headers
8.Access-Control-Allow-Methods
9.Access-Control-Expose-Headers
10.Access-Control-Max-Age
11.Access-Control-Request-Headers
12.Access-Control-Request-Method
13.Age
14.Allow
15.Authorization
16.Cache-Control
17.Connection
18.Content-Disposition
19.Content-Encoding
20.Content-Language
21.Content-Length
22.Content-Location
23.Content-Range
24.Content-Type
25.Cookie
26.Cookie2
27.Date
28.DNT
29.ETag
30.Expect
31.Expires
32.Forwarded
33.From
34.Headers
35.Host
36.If-Match
37.If-Modified-Since
38.If-None-Match
39.If-Range
40.If-Unmodified-Since
41.Keep-Alive
42.Large-Allocation
43.Last-Modified
44.Location
45.Origin
46.Pragma
47.Proxy-Authenticate
48.Proxy-Authorization
49.Public-Key-Pins
50.Public-Key-Pins-Report-Only
51.Range
52.Referer
53.Referrer-Policy
54.Retry-After
55.Server
56.Set-Cookie
57.Set-Cookie2
58.SourceMap
59.Strict-Transport-Security
60.TE
61.Tk
62.Trailer
63.Transfer-Encoding
64.Upgrade-Insecure-Requests
65.User-Agent
66.User-Agent: Firefox
67.Vary
68.Via
69.Warning
70.WWW-Authenticate
71.X-Content-Type-Options
72.X-DNS-Prefetch-Control
73.X-Forwarded-For
74.X-Forwarded-Host
75.X-Forwarded-Proto
76.X-Frame-Options
77.X-XSS-Protection

HTTP

超文本传输协议（ HTTP，HyperText Transfer Protocol ) 是互联网上应用最为广泛的一种网络协议。所有的 WWW 文件都必须遵守这个标准。

1.指南 \| Guides
2.指南：基础 \| Guides: Basics
3.CSP
4.标题 \| Headers
5.方法 \| Methods
6.RFC 2616: HTTP/1.1
7.RFC 4918: WebDAV
8.RFC 5023: The Atom Publishing Protocol
9.RFC 7230: Message Syntax and Routing
10.RFC 7231: Semantics and Content
11.RFC 7232: Conditional Requests
12.RFC 7233: Range Requests
13.RFC 7234: Caching
14.RFC 7235: Authentication
15.状态 \| Status
16.HTTP 请求方法
17.HTTP状态码
18.HTTP 响应头信息
19.HTTP 教程