Access-Control-Allow-Headers

HTTP response header

The Access-Control-Allow-Headers response header is used in response to a preflight request which includes the Access-Control-Request-Headers to indicate which HTTP headers can be used during the actual request. This header is required if the request has an Access-Control-Request-Headers header

Header usage statistics

Access-Control-Allow-Headers response header information and usage statistics.

Websites using header Access-Control-Allow-Headers668,372
Percentage of websites that use Access-Control-Allow-Headers header0.70%
Total discovered header valuesMore than 10,000
Header uses directivesYes
Header values are unique or randomNo
Most popular in the country US

Access-Control-Allow-Headers directives (18 total)

  • *
  • accept
  • access_token
  • authorization
  • cache-control
  • client-security-token
  • content-type
  • dnt
  • if-modified-since
  • keep-alive
  • origin
  • soapaction
  • typeform-version
  • user-agent
  • x-accept-charset
  • x-customheader
  • x-requested-with
  • x-typeform-key

Access-Control-Allow-Headers Directives

Access-Control-Allow-Headers directives value information and usage statistics

DirectiveShareWebsites countUnique Values
content-type78.01%521,3972
x-requested-with56.11%374,9942
origin32.62%218,0391
accept32.19%215,1811
authorization29.99%200,4571
cache-control22.20%148,4011
if-modified-since16.80%112,2811
user-agent15.47%103,4081
dnt14.02%93,6991
*12.82%85,6561
keep-alive11.72%78,3331
x-customheader8.31%55,5751
client-security-token2.37%15,8261
soapaction1.40%9,3451
x-accept-charset0.97%6,4841
typeform-version0.30%2,0271
x-typeform-key0.30%2,0271
access_token<0.1%4091

Connected technologies

Technologies that utilize the header

Ckan, category Content Management System, total 599 websites
Tealeaf, category Analytics, total 185 websites

Distribution by websites popularity

Access-Control-Allow-Headers detection in the top websites by popularity

Top 10k sites379 websites
Top 100k sites2,768 websites
Top 1m sites20,233 websites

Websites utilizing Access-Control-Allow-Headers

List of websites that use Access-Control-Allow-Headers header

DomainCountryRankContacts
static.parastorage.com US31
siteassets.parastorage.com US34
schema.org US64
www.namecheap.com US112
support.apple.com US131
get.adobe.com US204
See full domain list
Flat price per the report, subscription is not required.

Geographical Distribution

Header usage distribution by websites across the globe.






Common header values

List of top common Access-Control-Allow-Headers header values

Header valueValue prevalence
*12.11%
origin, x-requested-with, content-type9.73%
content-type8.13%
accept, content-type, cache-control, gclid5.15%
DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization5.15%
Origin, X-Requested-With, Content-Type, Accept4.70%
x-requested-with,content-type3.10%
X-Requested-With2.57%
DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range1.87%
accept, x-request, x-requested-with1.55%
Content-Type, Authorization1.43%
Origin, X-Requested-With, Content-Type, Accept, Authorization1.37%
x-requested-with, Content-Type, origin, authorization, accept, client-security-token1.37%
Content-Type,Accept1.24%
Content-Type, soapaction1.24%
DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type1.18%
Content-Type, Authorization, X-Requested-With0.99%
Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-Requested-With0.86%
Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With0.84%
X-Accept-Charset,X-Accept,Content-Type0.80%