access-control-allow-headers

HTTP response header

The Access-Control-Allow-Headers response header is used in response to a preflight request which includes the Access-Control-Request-Headers to indicate which HTTP headers can be used during the actual request. This header is required if the request has an Access-Control-Request-Headers header

Header usage statistics

access-control-allow-headers response header information and usage statistics.

Websites using header access-control-allow-headers 69,193
Percentage of websites that use access-control-allow-headers header 0.64%
Total discovered header values 4,602
Header uses directives Yes
Header values are unique or random No
Most popular in the country United States of America

access-control-allow-headers Directives (18 total)

  • *
  • accept
  • access_token
  • authorization
  • cache-control
  • client-security-token
  • content-type
  • dnt
  • if-modified-since
  • keep-alive
  • origin
  • soapaction
  • typeform-version
  • user-agent
  • x-accept-charset
  • x-customheader
  • x-requested-with
  • x-typeform-key

access-control-allow-headers Directives

access-control-allow-headers directives value information and usage statistics

Directive Share Websites count Unique Values
content-type 62.43% 43,199 1
x-requested-with 46.83% 32,400 1
origin 34.21% 23,674 1
accept 24.55% 16,984 1
authorization 23.85% 16,501 1
cache-control 13.74% 9,504 1
* 12.17% 8,424 1
user-agent 11.81% 8,169 1
if-modified-since 10.98% 7,597 1
dnt 10.48% 7,248 1
keep-alive 8.61% 5,955 1
x-customheader 5.45% 3,772 1
client-security-token 3.03% 2,099 1
typeform-version 1.93% 1,336 1
x-typeform-key 1.93% 1,336 1
soapaction 0.77% 533 1
x-accept-charset 0.71% 491 1
access_token <0.1% 39 1

Connected technologies

Technologies that utilize the header

Ckan, category Content Management System, total 145 websites

Distribution by websites popularity

access-control-allow-headers detection in the top websites by popularity

Top 10k sites 315 websites
Top 100k sites 1,366 websites
Top 1m sites 10,469 websites

Websites utilizing access-control-allow-headers

List of websites that use access-control-allow-headers header

Domain Country Rank Contacts
support.apple.com United States of America 68
www.businessinsider.com United States of America 71
www.ietf.org United States of America 197
www.shareasale.com United States of America 225
www.pbs.org United States of America 283
www.udemy.com United States of America 312
See full domain list
Flat price per report, subscription is not required.

Geographical Distribution

Header usage distribution by websites across the globe.






Common header values

List of top common access-control-allow-headers header values

Header value Value prevalence
origin, x-requested-with, content-type 15.64%
* 13.91%
Content-Type 8.61%
Origin, X-Requested-With, Content-Type, Accept 6.02%
DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization 3.10%
X-Typeform-Key, Content-Type, Authorization, Typeform-Version 2.40%
X-Requested-With 2.35%
DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range 2.17%
x-requested-with, Content-Type, origin, authorization, accept, client-security-token 1.77%
DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type 1.15%
Authorization,Content-Type,Accept,Origin,User-Agent,DNT,Cache-Control,X-Mx-ReqToken,Keep-Alive,X-Requested-With,If-Modified-Since 1.07%
Content-Type,Accept 0.98%
Origin, X-Requested-With, Content-Type, Accept, Authorization 0.96%
X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding 0.93%
Authorization, access-token 0.88%
accept, cache-control, content-type, authorization 0.82%
Authorization 0.73%
Content-Type, soapaction 0.72%
accept, X-Request, X-Requested-With 0.70%
Content-Type, Authorization 0.67%