access-control-allow-headers

HTTP response header

The Access-Control-Allow-Headers response header is used in response to a preflight request which includes the Access-Control-Request-Headers to indicate which HTTP headers can be used during the actual request. This header is required if the request has an Access-Control-Request-Headers header

Header usage statistics

access-control-allow-headers response header information and usage statistics.

Websites using header access-control-allow-headers 66,978
Percentage of websites that use access-control-allow-headers header 0.59%
Total discovered header values 4,444
Header uses directives Yes
Header values are unique or random No
Most popular in the country United States of America

access-control-allow-headers Directives (18 total)

  • *
  • accept
  • access_token
  • authorization
  • cache-control
  • client-security-token
  • content-type
  • dnt
  • if-modified-since
  • keep-alive
  • origin
  • soapaction
  • typeform-version
  • user-agent
  • x-accept-charset
  • x-customheader
  • x-requested-with
  • x-typeform-key

access-control-allow-headers Directives

access-control-allow-headers directives value information and usage statistics

Directive Share Websites count Unique Values
content-type 57.84% 38,739 1
x-requested-with 42.93% 28,751 1
origin 31.61% 21,173 1
authorization 21.47% 14,379 2
accept 21.23% 14,217 1
cache-control 11.06% 7,411 1
* 10.29% 6,890 1
user-agent 9.33% 6,248 1
if-modified-since 8.78% 5,879 1
dnt 8.31% 5,569 1
keep-alive 6.98% 4,678 1
x-customheader 5.18% 3,469 1
client-security-token 2.76% 1,850 1
typeform-version 1.93% 1,296 1
x-typeform-key 1.93% 1,296 1
soapaction 0.77% 517 2
x-accept-charset 0.67% 449 1
access_token 0.65% 437 1

Connected technologies

Technologies that utilize the header

Ckan, category Content Management System, total 153 websites

Distribution by websites popularity

access-control-allow-headers detection in the top websites by popularity

Top 10k sites 282 websites
Top 100k sites 1,253 websites
Top 1m sites 9,703 websites

Websites utilizing access-control-allow-headers

List of websites that use access-control-allow-headers header

Domain Country Rank Contacts
support.apple.com United States of America 68
ietf.org United States of America 197
www.udemy.com United States of America 312
www.agoda.com United States of America 339
www.arduino.cc United States of America 344
mega.nz EU 377
See full domain list

Geographical Distribution

Header usage distribution by websites across the globe.






Common header values

List of top common access-control-allow-headers header values

Header value Value prevalence
origin, x-requested-with, content-type 16.28%
* 12.80%
Content-Type 9.23%
Origin, X-Requested-With, Content-Type, Accept 6.07%
DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization 3.12%
X-Typeform-Key, Content-Type, Authorization, Typeform-Version 2.45%
x-requested-with 2.38%
x-requested-with, Content-Type, origin, authorization, accept, client-security-token 1.87%
DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range 1.38%
DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type 1.18%
Content-Type,Accept 1.08%
X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding 0.99%
Origin, X-Requested-With, Content-Type, Accept, Authorization 0.97%
accept, cache-control, content-type, authorization 0.82%
Authorization, access-token 0.80%
Access-Control-Allow-Origin,Authorization,Origin,X-Requested-With,Content-Type,Content-Range,Content-Disposition,Content-Description,Accept 0.79%
accept, content-type 0.76%
Content-Type,x-requested-with,logging.correlationid,Authorization,access_token 0.74%
Content-Type, soapaction 0.72%
Authorization 0.72%