Access-Control-Allow-Headers

HTTP response header

The Access-Control-Allow-Headers response header is used in response to a preflight request which includes the Access-Control-Request-Headers to indicate which HTTP headers can be used during the actual request. This header is required if the request has an Access-Control-Request-Headers header

Header usage statistics

Access-Control-Allow-Headers response header information and usage statistics.
Websites using header Access-Control-Allow-Headers591,835
Percentage of websites that use Access-Control-Allow-Headers header0.72%
Total discovered header valuesMore than 10,000
Header uses directivesYes
Header values are unique or randomNo
Most popular in the country United States

Access-Control-Allow-Headers directives (18 total)

  • *
  • accept
  • access_token
  • authorization
  • cache-control
  • client-security-token
  • content-type
  • dnt
  • if-modified-since
  • keep-alive
  • origin
  • soapaction
  • typeform-version
  • user-agent
  • x-accept-charset
  • x-customheader
  • x-requested-with
  • x-typeform-key

Access-Control-Allow-Headers Directives

Access-Control-Allow-Headers directives value information and usage statistics
DirectiveShareWebsites countUnique Values
content-type77.63%459,4631
x-requested-with53.75%318,1242
authorization34.35%203,2881
origin33.82%200,1881
accept27.66%163,6751
cache-control13.96%82,6061
if-modified-since12.88%76,2271
*12.69%75,1081
user-agent11.72%69,3531
dnt10.19%60,3141
keep-alive7.21%42,6911
x-customheader3.84%22,7261
client-security-token2.44%14,4311
soapaction1.48%8,7811
x-accept-charset1.00%5,9261
typeform-version0.34%2,0311
x-typeform-key0.34%2,0311
access_token<0.1%4671

Connected technologies

Technologies that utilize the header
Tealeaf, category Analytics, total 677 websites
Ckan, category Content Management System, total 553 websites

Access-Control-Allow-Headers header usage distribution by website rank



Geographical Distribution

Header usage distribution by websites across the globe.



Websites utilizing Access-Control-Allow-Headers

List of websites that use Access-Control-Allow-Headers header
DomainCountryRankContacts
static.parastorage.com United States31
siteassets.parastorage.com United States34
schema.org United States64
www.godaddy.com United States97
www.namecheap.com United States112
support.apple.com United States131
See full domain list

Common header values

List of top common Access-Control-Allow-Headers header values
Header valueValue prevalence
*11.98%
origin, x-requested-with, content-type10.28%
content-type8.23%
Content-Type, Authorization6.15%
Origin, X-Requested-With, Content-Type, Accept4.28%
X-Requested-With2.89%
x-requested-with,content-type2.26%
DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range2.12%
accept, x-request, x-requested-with1.68%
Origin, X-Requested-With, Content-Type, Accept, Authorization1.62%
x-requested-with, Content-Type, origin, authorization, accept, client-security-token1.45%
Authorization, Content-Type1.34%
DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type1.33%
Content-Type, soapaction1.32%
Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-Requested-With1.24%
Content-Type,Accept1.20%
Authorization1.02%
Content-Type, Authorization, X-Requested-With1.02%
X-Accept-Charset,X-Accept,Content-Type0.84%
Pragma, Cache-Control, If-Modified-Since0.81%