x-zendesk-origin-server

For security purposes modern browsers have a same-origin policy restriction that prevents scripts running in the browser from accessing resources in other domains. However if the server in the other domain implements Cross-Origin Resource Sharing (CORS) the browser will allow a script to access resources in that domain. Zendesk only implements CORS for API requests authenticated with OAuth access tokens. It does not implement CORS for API requests that use basic authentication (email and password) or a Zendesk API token.

Header usage statistics

x-zendesk-origin-server response header information and usage statistics.

Websites using header x-zendesk-origin-server	13,921
Percentage of websites that use x-zendesk-origin-server header	<0.1%
Total discovered header values	More than 10,000
Header uses directives	No
Header values are unique or random	No
Most popular in the country	United States