Access-Control-Allow-Headers

HTTP response header

The Access-Control-Allow-Headers response header is used in response to a preflight request which includes the Access-Control-Request-Headers to indicate which HTTP headers can be used during the actual request. This header is required if the request has an Access-Control-Request-Headers header

Header usage statistics

Access-Control-Allow-Headers response header information and usage statistics.

Websites using header Access-Control-Allow-Headers 719,718
Percentage of websites that use Access-Control-Allow-Headers header 0.71%
Total discovered header values 10,001
Header uses directives Yes
Header values are unique or random No
Most popular in the country United States of America

Access-Control-Allow-Headers Directives (18 total)

  • *
  • accept
  • access_token
  • authorization
  • cache-control
  • client-security-token
  • content-type
  • dnt
  • if-modified-since
  • keep-alive
  • origin
  • soapaction
  • typeform-version
  • user-agent
  • x-accept-charset
  • x-customheader
  • x-requested-with
  • x-typeform-key

Access-Control-Allow-Headers Directives

Access-Control-Allow-Headers directives value information and usage statistics

Directive Share Websites count Unique Values
content-type 75.11% 540,610 2
x-requested-with 54.69% 393,586 2
origin 31.49% 226,636 1
accept 31.28% 225,129 1
authorization 27.07% 194,863 2
cache-control 21.11% 151,925 1
* 15.17% 109,171 1
if-modified-since 14.30% 102,919 1
user-agent 14.30% 102,905 1
dnt 12.88% 92,683 1
keep-alive 10.66% 76,749 1
x-customheader 7.91% 56,948 1
client-security-token 2.29% 16,447 1
soapaction 1.28% 9,221 1
x-accept-charset 0.94% 6,793 1
typeform-version 0.28% 2,026 1
x-typeform-key 0.28% 2,026 1
access_token 0.12% 835 1

Connected technologies

Technologies that utilize the header

Ckan, category Content Management System, total 672 websites
Tealeaf, category Analytics, total 135 websites

Distribution by websites popularity

Access-Control-Allow-Headers detection in the top websites by popularity

Top 10k sites 360 websites
Top 100k sites 2,639 websites
Top 1m sites 20,471 websites

Websites utilizing Access-Control-Allow-Headers

List of websites that use Access-Control-Allow-Headers header

Domain Country Rank Contacts
static.parastorage.com United States of America 31
siteassets.parastorage.com United States of America 34
schema.org United States of America 64
support.apple.com United States of America 131
sslstatic.wix.com United States of America 179
zoom.us United States of America 330
See full domain list
Flat price per the report, subscription is not required.

Geographical Distribution

Header usage distribution by websites across the globe.






Common header values

List of top common Access-Control-Allow-Headers header values

Header value Value prevalence
* 14.52%
origin, x-requested-with, content-type 9.75%
content-type 7.95%
DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization 5.38%
accept, content-type, cache-control 5.11%
Origin, X-Requested-With, Content-Type, Accept 4.86%
x-requested-with,content-type 3.73%
X-Requested-With 2.92%
DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range 1.91%
accept, x-request, x-requested-with 1.47%
Origin, X-Requested-With, Content-Type, Accept, Authorization 1.34%
x-requested-with, Content-Type, origin, authorization, accept, client-security-token 1.30%
Content-Type,Accept 1.27%
Content-Type, soapaction 1.13%
Content-Type, Authorization, X-Requested-With 1.02%
DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type 0.91%
X-Accept-Charset,X-Accept,Content-Type 0.77%
Authorization 0.70%
Content-Type, Authorization, Accept, X-Requested-With 0.70%
Pragma, Cache-Control, If-Modified-Since 0.70%