Document Standards

CORSCORS

CORS Usage Statistics

The Cross-Origin Resource Sharing (CORS) mechanism gives web servers cross-domain access controls, which enable secure cross-domain data transfers. Access Control Allow Origin.

X-Frame-OptionsX-Frame-Options

X-Frame-Options Usage Statistics

The X-Frame-Options HTTP response header can be used to indicate whether or not a browser should be allowed to render a page in a frame or iframe. Sites can use this to avoid clickjacking attacks, by ensuring that their content is not embedded into other sites.

Content Type OptionsContent Type Options

Content Type Options Usage Statistics

Used to disable MIME-sniffing for a particular HTTP response.

X-XSS-ProtectionX-XSS-Protection

X-XSS-Protection Usage Statistics

X-XSS-Protection is a HTTP header set by Internet Explorer 8+. This header lets domains toggle on and off the "XSS Filter" of IE8, which prevents some categories of XSS attacks.

Referrer PolicyReferrer Policy

Referrer Policy Usage Statistics

Requests made from a document, and for navigations away from that document are associated with a Referrer header. This policy determines in the browser should send a referrer or not.

Report URI CSPReport URI CSP

Report URI CSP Usage Statistics

Report-uri directive instructs the user agent to report attempts to violate the Content Security Policy.