access-control-allow-headers

HTTP response header

The Access-Control-Allow-Headers response header is used in response to a preflight request which includes the Access-Control-Request-Headers to indicate which HTTP headers can be used during the actual request. This header is required if the request has an Access-Control-Request-Headers header

Header usage statistics

access-control-allow-headers response header information and usage statistics.

Websites using header access-control-allow-headers 69,964
Percentage of websites that use access-control-allow-headers header 0.60%
Total discovered header values 4,580
Header uses directives Yes
Header values are unique or random No
Most popular in the country United States of America

access-control-allow-headers Directives (18 total)

  • *
  • accept
  • access_token
  • authorization
  • cache-control
  • client-security-token
  • content-type
  • dnt
  • if-modified-since
  • keep-alive
  • origin
  • soapaction
  • typeform-version
  • user-agent
  • x-accept-charset
  • x-customheader
  • x-requested-with
  • x-typeform-key

access-control-allow-headers Directives

access-control-allow-headers directives value information and usage statistics

Directive Share Websites count Unique Values
content-type 61.32% 42,899 1
x-requested-with 45.61% 31,909 1
origin 33.49% 23,434 1
accept 24.14% 16,888 1
authorization 23.08% 16,150 1
cache-control 12.90% 9,025 1
* 11.34% 7,931 1
user-agent 11.29% 7,896 1
if-modified-since 10.51% 7,353 1
dnt 10.03% 7,016 1
keep-alive 8.23% 5,758 1
x-customheader 5.34% 3,739 1
client-security-token 3.07% 2,145 1
typeform-version 1.86% 1,304 1
x-typeform-key 1.86% 1,304 1
soapaction 0.76% 535 1
x-accept-charset 0.71% 497 1
access_token <0.1% 46 1

Connected technologies

Technologies that utilize the header

Ckan, category Content Management System, total 148 websites

Distribution by websites popularity

access-control-allow-headers detection in the top websites by popularity

Top 10k sites 312 websites
Top 100k sites 1,356 websites
Top 1m sites 10,437 websites

Websites utilizing access-control-allow-headers

List of websites that use access-control-allow-headers header

Domain Country Rank Contacts
support.apple.com United States of America 68
www.businessinsider.com United States of America 71
ietf.org United States of America 197
www.shareasale.com United States of America 225
www.udemy.com United States of America 312
www.agoda.com United States of America 339
See full domain list

Geographical Distribution

Header usage distribution by websites across the globe.






Common header values

List of top common access-control-allow-headers header values

Header value Value prevalence
origin, x-requested-with, content-type 15.55%
* 13.77%
Content-Type 9.04%
Origin, X-Requested-With, Content-Type, Accept 5.99%
DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization 3.10%
X-Typeform-Key, Content-Type, Authorization, Typeform-Version 2.39%
x-requested-with 2.30%
DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range 2.10%
x-requested-with, Content-Type, origin, authorization, accept, client-security-token 1.88%
DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type 1.17%
Authorization,Content-Type,Accept,Origin,User-Agent,DNT,Cache-Control,X-Mx-ReqToken,Keep-Alive,X-Requested-With,If-Modified-Since 1.06%
Content-Type,Accept 1.03%
Origin, X-Requested-With, Content-Type, Accept, Authorization 0.97%
X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding 0.94%
accept, cache-control, content-type, authorization 0.82%
Access-Control-Allow-Origin,Authorization,Origin,X-Requested-With,Content-Type,Content-Range,Content-Disposition,Content-Description,Accept 0.77%
accept, content-type 0.74%
Authorization 0.74%
accept, X-Request, X-Requested-With 0.71%
Authorization, access-token 0.71%