access-control-allow-headers

HTTP response header

The Access-Control-Allow-Headers response header is used in response to a preflight request which includes the Access-Control-Request-Headers to indicate which HTTP headers can be used during the actual request. This header is required if the request has an Access-Control-Request-Headers header

Header usage statistics

access-control-allow-headers response header information and usage statistics.

Websites using header access-control-allow-headers 283,748
Percentage of websites that use access-control-allow-headers header 0.53%
Total discovered header values 9,275
Header uses directives Yes
Header values are unique or random No
Most popular in the country United States of America

access-control-allow-headers Directives (18 total)

  • *
  • accept
  • access_token
  • authorization
  • cache-control
  • client-security-token
  • content-type
  • dnt
  • if-modified-since
  • keep-alive
  • origin
  • soapaction
  • typeform-version
  • user-agent
  • x-accept-charset
  • x-customheader
  • x-requested-with
  • x-typeform-key

access-control-allow-headers Directives

access-control-allow-headers directives value information and usage statistics

Directive Share Websites count Unique Values
content-type 28.50% 80,875 2
x-requested-with 20.49% 58,143 1
origin 13.43% 38,116 1
accept 10.67% 30,279 1
authorization 9.67% 27,448 2
cache-control 6.66% 18,897 1
* 6.07% 17,211 1
if-modified-since 5.39% 15,299 1
user-agent 5.05% 14,317 1
dnt 4.59% 13,018 1
keep-alive 3.81% 10,815 1
x-customheader 3.03% 8,587 1
soapaction 1.02% 2,907 1
client-security-token 1.01% 2,869 1
x-accept-charset 0.41% 1,162 1
typeform-version <0.1% 282 1
x-typeform-key <0.1% 282 1
access_token <0.1% 70 1

Connected technologies

Technologies that utilize the header

Ckan, category Content Management System, total 223 websites

Distribution by websites popularity

access-control-allow-headers detection in the top websites by popularity

Top 10k sites 306 websites
Top 100k sites 1,332 websites
Top 1m sites 10,201 websites

Websites utilizing access-control-allow-headers

List of websites that use access-control-allow-headers header

Domain Country Rank Contacts
support.apple.com United States of America 68
www.businessinsider.com United States of America 71
www.ietf.org United States of America 197
www.shareasale.com United States of America 225
www.pbs.org United States of America 283
www.udemy.com United States of America 312
See full domain list
Flat price per the report, subscription is not required.

Geographical Distribution

Header usage distribution by websites across the globe.






Common header values

List of top common access-control-allow-headers header values

Header value Value prevalence
* 17.10%
origin, x-requested-with, content-type 14.75%
Content-Type 8.63%
Origin, X-Requested-With, Content-Type, Accept 5.09%
DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization 4.37%
X-Requested-With 2.65%
accept, content-type, cache-control 2.43%
Content-Type, soapaction 2.23%
DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range 1.68%
Content-Type,Accept 1.60%
x-requested-with, Content-Type, origin, authorization, accept, client-security-token 1.41%
accept, X-Request, X-Requested-With 1.31%
Pragma, Cache-Control, If-Modified-Since 1.31%
Origin, X-Requested-With, Content-Type, Accept, Authorization 1.09%
X-Requested-With,Content-Type 0.98%
X-Accept-Charset,X-Accept,Content-Type 0.92%
DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type 0.80%
X-Typeform-Key, Content-Type, Authorization, Typeform-Version 0.69%
Content-Type, Authorization 0.68%
Content-Type, Authorization, Accept, X-Requested-With 0.68%