001/* 002 * Copyright (C) 2011 The Guava Authors 003 * 004 * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except 005 * in compliance with the License. You may obtain a copy of the License at 006 * 007 * http://www.apache.org/licenses/LICENSE-2.0 008 * 009 * Unless required by applicable law or agreed to in writing, software distributed under the License 010 * is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express 011 * or implied. See the License for the specific language governing permissions and limitations under 012 * the License. 013 */ 014 015package com.google.common.net; 016 017import com.google.common.annotations.Beta; 018import com.google.common.annotations.GwtCompatible; 019 020/** 021 * Contains constant definitions for the HTTP header field names. See: 022 * 023 * <ul> 024 * <li><a href="http://www.ietf.org/rfc/rfc2109.txt">RFC 2109</a> 025 * <li><a href="http://www.ietf.org/rfc/rfc2183.txt">RFC 2183</a> 026 * <li><a href="http://www.ietf.org/rfc/rfc2616.txt">RFC 2616</a> 027 * <li><a href="http://www.ietf.org/rfc/rfc2965.txt">RFC 2965</a> 028 * <li><a href="http://www.ietf.org/rfc/rfc5988.txt">RFC 5988</a> 029 * </ul> 030 * 031 * 032 * @author Kurt Alfred Kluever 033 * @since 11.0 034 */ 035@GwtCompatible 036public final class HttpHeaders { 037 private HttpHeaders() {} 038 039 // HTTP Request and Response header fields 040 041 /** The HTTP {@code Cache-Control} header field name. */ 042 public static final String CACHE_CONTROL = "Cache-Control"; 043 /** The HTTP {@code Content-Length} header field name. */ 044 public static final String CONTENT_LENGTH = "Content-Length"; 045 /** The HTTP {@code Content-Type} header field name. */ 046 public static final String CONTENT_TYPE = "Content-Type"; 047 /** The HTTP {@code Date} header field name. */ 048 public static final String DATE = "Date"; 049 /** The HTTP {@code Pragma} header field name. */ 050 public static final String PRAGMA = "Pragma"; 051 /** The HTTP {@code Via} header field name. */ 052 public static final String VIA = "Via"; 053 /** The HTTP {@code Warning} header field name. */ 054 public static final String WARNING = "Warning"; 055 056 // HTTP Request header fields 057 058 /** The HTTP {@code Accept} header field name. */ 059 public static final String ACCEPT = "Accept"; 060 /** The HTTP {@code Accept-Charset} header field name. */ 061 public static final String ACCEPT_CHARSET = "Accept-Charset"; 062 /** The HTTP {@code Accept-Encoding} header field name. */ 063 public static final String ACCEPT_ENCODING = "Accept-Encoding"; 064 /** The HTTP {@code Accept-Language} header field name. */ 065 public static final String ACCEPT_LANGUAGE = "Accept-Language"; 066 /** The HTTP {@code Access-Control-Request-Headers} header field name. */ 067 public static final String ACCESS_CONTROL_REQUEST_HEADERS = "Access-Control-Request-Headers"; 068 /** The HTTP {@code Access-Control-Request-Method} header field name. */ 069 public static final String ACCESS_CONTROL_REQUEST_METHOD = "Access-Control-Request-Method"; 070 /** The HTTP {@code Authorization} header field name. */ 071 public static final String AUTHORIZATION = "Authorization"; 072 /** The HTTP {@code Connection} header field name. */ 073 public static final String CONNECTION = "Connection"; 074 /** The HTTP {@code Cookie} header field name. */ 075 public static final String COOKIE = "Cookie"; 076 /** 077 * The HTTP <a href="https://fetch.spec.whatwg.org/#cross-origin-resource-policy-header">{@code 078 * Cross-Origin-Resource-Policy}</a> header field name. 079 * 080 * @since 28.0 081 */ 082 public static final String CROSS_ORIGIN_RESOURCE_POLICY = "Cross-Origin-Resource-Policy"; 083 /** 084 * The HTTP <a href="https://tools.ietf.org/html/rfc8470">{@code Early-Data}</a> header field 085 * name. 086 * 087 * @since 27.0 088 */ 089 public static final String EARLY_DATA = "Early-Data"; 090 /** The HTTP {@code Expect} header field name. */ 091 public static final String EXPECT = "Expect"; 092 /** The HTTP {@code From} header field name. */ 093 public static final String FROM = "From"; 094 /** 095 * The HTTP <a href="https://tools.ietf.org/html/rfc7239">{@code Forwarded}</a> header field name. 096 * 097 * @since 20.0 098 */ 099 public static final String FORWARDED = "Forwarded"; 100 /** 101 * The HTTP {@code Follow-Only-When-Prerender-Shown} header field name. 102 * 103 * @since 17.0 104 */ 105 @Beta 106 public static final String FOLLOW_ONLY_WHEN_PRERENDER_SHOWN = "Follow-Only-When-Prerender-Shown"; 107 /** The HTTP {@code Host} header field name. */ 108 public static final String HOST = "Host"; 109 /** 110 * The HTTP <a href="https://tools.ietf.org/html/rfc7540#section-3.2.1">{@code HTTP2-Settings} 111 * </a> header field name. 112 * 113 * @since 24.0 114 */ 115 public static final String HTTP2_SETTINGS = "HTTP2-Settings"; 116 /** The HTTP {@code If-Match} header field name. */ 117 public static final String IF_MATCH = "If-Match"; 118 /** The HTTP {@code If-Modified-Since} header field name. */ 119 public static final String IF_MODIFIED_SINCE = "If-Modified-Since"; 120 /** The HTTP {@code If-None-Match} header field name. */ 121 public static final String IF_NONE_MATCH = "If-None-Match"; 122 /** The HTTP {@code If-Range} header field name. */ 123 public static final String IF_RANGE = "If-Range"; 124 /** The HTTP {@code If-Unmodified-Since} header field name. */ 125 public static final String IF_UNMODIFIED_SINCE = "If-Unmodified-Since"; 126 /** The HTTP {@code Last-Event-ID} header field name. */ 127 public static final String LAST_EVENT_ID = "Last-Event-ID"; 128 /** The HTTP {@code Max-Forwards} header field name. */ 129 public static final String MAX_FORWARDS = "Max-Forwards"; 130 /** The HTTP {@code Origin} header field name. */ 131 public static final String ORIGIN = "Origin"; 132 /** The HTTP {@code Proxy-Authorization} header field name. */ 133 public static final String PROXY_AUTHORIZATION = "Proxy-Authorization"; 134 /** The HTTP {@code Range} header field name. */ 135 public static final String RANGE = "Range"; 136 /** The HTTP {@code Referer} header field name. */ 137 public static final String REFERER = "Referer"; 138 /** 139 * The HTTP <a href="https://www.w3.org/TR/referrer-policy/">{@code Referrer-Policy}</a> header 140 * field name. 141 * 142 * @since 23.4 143 */ 144 public static final String REFERRER_POLICY = "Referrer-Policy"; 145 146 /** 147 * Values for the <a href="https://www.w3.org/TR/referrer-policy/">{@code Referrer-Policy}</a> 148 * header. 149 * 150 * @since 23.4 151 */ 152 public static final class ReferrerPolicyValues { 153 private ReferrerPolicyValues() {} 154 155 public static final String NO_REFERRER = "no-referrer"; 156 public static final String NO_REFFERER_WHEN_DOWNGRADE = "no-referrer-when-downgrade"; 157 public static final String SAME_ORIGIN = "same-origin"; 158 public static final String ORIGIN = "origin"; 159 public static final String STRICT_ORIGIN = "strict-origin"; 160 public static final String ORIGIN_WHEN_CROSS_ORIGIN = "origin-when-cross-origin"; 161 public static final String STRICT_ORIGIN_WHEN_CROSS_ORIGIN = "strict-origin-when-cross-origin"; 162 public static final String UNSAFE_URL = "unsafe-url"; 163 } 164 165 /** 166 * The HTTP <a href="https://www.w3.org/TR/service-workers/#update-algorithm">{@code 167 * Service-Worker}</a> header field name. 168 * 169 * @since 20.0 170 */ 171 public static final String SERVICE_WORKER = "Service-Worker"; 172 /** The HTTP {@code TE} header field name. */ 173 public static final String TE = "TE"; 174 /** The HTTP {@code Upgrade} header field name. */ 175 public static final String UPGRADE = "Upgrade"; 176 /** 177 * The HTTP <a href="https://w3c.github.io/webappsec-upgrade-insecure-requests/#preference">{@code 178 * Upgrade-Insecure-Requests}</a> header field name. 179 * 180 * @since 28.1 181 */ 182 public static final String UPGRADE_INSECURE_REQUESTS = "Upgrade-Insecure-Requests"; 183 184 /** The HTTP {@code User-Agent} header field name. */ 185 public static final String USER_AGENT = "User-Agent"; 186 187 // HTTP Response header fields 188 189 /** The HTTP {@code Accept-Ranges} header field name. */ 190 public static final String ACCEPT_RANGES = "Accept-Ranges"; 191 /** The HTTP {@code Access-Control-Allow-Headers} header field name. */ 192 public static final String ACCESS_CONTROL_ALLOW_HEADERS = "Access-Control-Allow-Headers"; 193 /** The HTTP {@code Access-Control-Allow-Methods} header field name. */ 194 public static final String ACCESS_CONTROL_ALLOW_METHODS = "Access-Control-Allow-Methods"; 195 /** The HTTP {@code Access-Control-Allow-Origin} header field name. */ 196 public static final String ACCESS_CONTROL_ALLOW_ORIGIN = "Access-Control-Allow-Origin"; 197 /** The HTTP {@code Access-Control-Allow-Credentials} header field name. */ 198 public static final String ACCESS_CONTROL_ALLOW_CREDENTIALS = "Access-Control-Allow-Credentials"; 199 /** The HTTP {@code Access-Control-Expose-Headers} header field name. */ 200 public static final String ACCESS_CONTROL_EXPOSE_HEADERS = "Access-Control-Expose-Headers"; 201 /** The HTTP {@code Access-Control-Max-Age} header field name. */ 202 public static final String ACCESS_CONTROL_MAX_AGE = "Access-Control-Max-Age"; 203 /** The HTTP {@code Age} header field name. */ 204 public static final String AGE = "Age"; 205 /** The HTTP {@code Allow} header field name. */ 206 public static final String ALLOW = "Allow"; 207 /** The HTTP {@code Content-Disposition} header field name. */ 208 public static final String CONTENT_DISPOSITION = "Content-Disposition"; 209 /** The HTTP {@code Content-Encoding} header field name. */ 210 public static final String CONTENT_ENCODING = "Content-Encoding"; 211 /** The HTTP {@code Content-Language} header field name. */ 212 public static final String CONTENT_LANGUAGE = "Content-Language"; 213 /** The HTTP {@code Content-Location} header field name. */ 214 public static final String CONTENT_LOCATION = "Content-Location"; 215 /** The HTTP {@code Content-MD5} header field name. */ 216 public static final String CONTENT_MD5 = "Content-MD5"; 217 /** The HTTP {@code Content-Range} header field name. */ 218 public static final String CONTENT_RANGE = "Content-Range"; 219 /** 220 * The HTTP <a href="http://w3.org/TR/CSP/#content-security-policy-header-field">{@code 221 * Content-Security-Policy}</a> header field name. 222 * 223 * @since 15.0 224 */ 225 public static final String CONTENT_SECURITY_POLICY = "Content-Security-Policy"; 226 /** 227 * The HTTP <a href="http://w3.org/TR/CSP/#content-security-policy-report-only-header-field"> 228 * {@code Content-Security-Policy-Report-Only}</a> header field name. 229 * 230 * @since 15.0 231 */ 232 public static final String CONTENT_SECURITY_POLICY_REPORT_ONLY = 233 "Content-Security-Policy-Report-Only"; 234 /** 235 * The HTTP nonstandard {@code X-Content-Security-Policy} header field name. It was introduced in 236 * <a href="https://www.w3.org/TR/2011/WD-CSP-20111129/">CSP v.1</a> and used by the Firefox until 237 * version 23 and the Internet Explorer version 10. Please, use {@link #CONTENT_SECURITY_POLICY} 238 * to pass the CSP. 239 * 240 * @since 20.0 241 */ 242 public static final String X_CONTENT_SECURITY_POLICY = "X-Content-Security-Policy"; 243 /** 244 * The HTTP nonstandard {@code X-Content-Security-Policy-Report-Only} header field name. It was 245 * introduced in <a href="https://www.w3.org/TR/2011/WD-CSP-20111129/">CSP v.1</a> and used by the 246 * Firefox until version 23 and the Internet Explorer version 10. Please, use {@link 247 * #CONTENT_SECURITY_POLICY_REPORT_ONLY} to pass the CSP. 248 * 249 * @since 20.0 250 */ 251 public static final String X_CONTENT_SECURITY_POLICY_REPORT_ONLY = 252 "X-Content-Security-Policy-Report-Only"; 253 /** 254 * The HTTP nonstandard {@code X-WebKit-CSP} header field name. It was introduced in <a 255 * href="https://www.w3.org/TR/2011/WD-CSP-20111129/">CSP v.1</a> and used by the Chrome until 256 * version 25. Please, use {@link #CONTENT_SECURITY_POLICY} to pass the CSP. 257 * 258 * @since 20.0 259 */ 260 public static final String X_WEBKIT_CSP = "X-WebKit-CSP"; 261 /** 262 * The HTTP nonstandard {@code X-WebKit-CSP-Report-Only} header field name. It was introduced in 263 * <a href="https://www.w3.org/TR/2011/WD-CSP-20111129/">CSP v.1</a> and used by the Chrome until 264 * version 25. Please, use {@link #CONTENT_SECURITY_POLICY_REPORT_ONLY} to pass the CSP. 265 * 266 * @since 20.0 267 */ 268 public static final String X_WEBKIT_CSP_REPORT_ONLY = "X-WebKit-CSP-Report-Only"; 269 /** 270 * The HTTP <a href="https://wicg.github.io/cross-origin-embedder-policy/#COEP">{@code 271 * Cross-Origin-Embedder-Policy}</a> header field name. 272 * 273 * @since 30.0 274 */ 275 public static final String CROSS_ORIGIN_EMBEDDER_POLICY = "Cross-Origin-Embedder-Policy"; 276 /** 277 * The HTTP <a href="https://wicg.github.io/cross-origin-embedder-policy/#COEP-RO">{@code 278 * Cross-Origin-Embedder-Policy-Report-Only}</a> header field name. 279 * 280 * @since 30.0 281 */ 282 public static final String CROSS_ORIGIN_EMBEDDER_POLICY_REPORT_ONLY = 283 "Cross-Origin-Embedder-Policy-Report-Only"; 284 /** 285 * The HTTP Cross-Origin-Opener-Policy header field name. 286 * 287 * @since 28.2 288 */ 289 public static final String CROSS_ORIGIN_OPENER_POLICY = "Cross-Origin-Opener-Policy"; 290 /** The HTTP {@code ETag} header field name. */ 291 public static final String ETAG = "ETag"; 292 /** The HTTP {@code Expires} header field name. */ 293 public static final String EXPIRES = "Expires"; 294 /** The HTTP {@code Last-Modified} header field name. */ 295 public static final String LAST_MODIFIED = "Last-Modified"; 296 /** The HTTP {@code Link} header field name. */ 297 public static final String LINK = "Link"; 298 /** The HTTP {@code Location} header field name. */ 299 public static final String LOCATION = "Location"; 300 /** 301 * The HTTP <a href="https://googlechrome.github.io/OriginTrials/#header">{@code Origin-Trial}</a> 302 * header field name. 303 * 304 * @since 27.1 305 */ 306 public static final String ORIGIN_TRIAL = "Origin-Trial"; 307 /** The HTTP {@code P3P} header field name. Limited browser support. */ 308 public static final String P3P = "P3P"; 309 /** The HTTP {@code Proxy-Authenticate} header field name. */ 310 public static final String PROXY_AUTHENTICATE = "Proxy-Authenticate"; 311 /** The HTTP {@code Refresh} header field name. Non-standard header supported by most browsers. */ 312 public static final String REFRESH = "Refresh"; 313 /** 314 * The HTTP <a href="https://www.w3.org/TR/reporting/">{@code Report-To}</a> header field name. 315 * 316 * @since 27.1 317 */ 318 public static final String REPORT_TO = "Report-To"; 319 /** The HTTP {@code Retry-After} header field name. */ 320 public static final String RETRY_AFTER = "Retry-After"; 321 /** The HTTP {@code Server} header field name. */ 322 public static final String SERVER = "Server"; 323 /** 324 * The HTTP <a href="https://www.w3.org/TR/server-timing/">{@code Server-Timing}</a> header field 325 * name. 326 * 327 * @since 23.6 328 */ 329 public static final String SERVER_TIMING = "Server-Timing"; 330 /** 331 * The HTTP <a href="https://www.w3.org/TR/service-workers/#update-algorithm">{@code 332 * Service-Worker-Allowed}</a> header field name. 333 * 334 * @since 20.0 335 */ 336 public static final String SERVICE_WORKER_ALLOWED = "Service-Worker-Allowed"; 337 /** The HTTP {@code Set-Cookie} header field name. */ 338 public static final String SET_COOKIE = "Set-Cookie"; 339 /** The HTTP {@code Set-Cookie2} header field name. */ 340 public static final String SET_COOKIE2 = "Set-Cookie2"; 341 342 /** 343 * The HTTP <a href="http://goo.gl/Dxx19N">{@code SourceMap}</a> header field name. 344 * 345 * @since 27.1 346 */ 347 @Beta public static final String SOURCE_MAP = "SourceMap"; 348 349 /** 350 * The HTTP <a href="http://tools.ietf.org/html/rfc6797#section-6.1">{@code 351 * Strict-Transport-Security}</a> header field name. 352 * 353 * @since 15.0 354 */ 355 public static final String STRICT_TRANSPORT_SECURITY = "Strict-Transport-Security"; 356 /** 357 * The HTTP <a href="http://www.w3.org/TR/resource-timing/#cross-origin-resources">{@code 358 * Timing-Allow-Origin}</a> header field name. 359 * 360 * @since 15.0 361 */ 362 public static final String TIMING_ALLOW_ORIGIN = "Timing-Allow-Origin"; 363 /** The HTTP {@code Trailer} header field name. */ 364 public static final String TRAILER = "Trailer"; 365 /** The HTTP {@code Transfer-Encoding} header field name. */ 366 public static final String TRANSFER_ENCODING = "Transfer-Encoding"; 367 /** The HTTP {@code Vary} header field name. */ 368 public static final String VARY = "Vary"; 369 /** The HTTP {@code WWW-Authenticate} header field name. */ 370 public static final String WWW_AUTHENTICATE = "WWW-Authenticate"; 371 372 // Common, non-standard HTTP header fields 373 374 /** The HTTP {@code DNT} header field name. */ 375 public static final String DNT = "DNT"; 376 /** The HTTP {@code X-Content-Type-Options} header field name. */ 377 public static final String X_CONTENT_TYPE_OPTIONS = "X-Content-Type-Options"; 378 /** The HTTP {@code X-Do-Not-Track} header field name. */ 379 public static final String X_DO_NOT_TRACK = "X-Do-Not-Track"; 380 /** The HTTP {@code X-Forwarded-For} header field name (superseded by {@code Forwarded}). */ 381 public static final String X_FORWARDED_FOR = "X-Forwarded-For"; 382 /** The HTTP {@code X-Forwarded-Proto} header field name. */ 383 public static final String X_FORWARDED_PROTO = "X-Forwarded-Proto"; 384 /** 385 * The HTTP <a href="http://goo.gl/lQirAH">{@code X-Forwarded-Host}</a> header field name. 386 * 387 * @since 20.0 388 */ 389 public static final String X_FORWARDED_HOST = "X-Forwarded-Host"; 390 /** 391 * The HTTP <a href="http://goo.gl/YtV2at">{@code X-Forwarded-Port}</a> header field name. 392 * 393 * @since 20.0 394 */ 395 public static final String X_FORWARDED_PORT = "X-Forwarded-Port"; 396 /** The HTTP {@code X-Frame-Options} header field name. */ 397 public static final String X_FRAME_OPTIONS = "X-Frame-Options"; 398 /** The HTTP {@code X-Powered-By} header field name. */ 399 public static final String X_POWERED_BY = "X-Powered-By"; 400 /** 401 * The HTTP <a href="http://tools.ietf.org/html/draft-evans-palmer-key-pinning">{@code 402 * Public-Key-Pins}</a> header field name. 403 * 404 * @since 15.0 405 */ 406 @Beta public static final String PUBLIC_KEY_PINS = "Public-Key-Pins"; 407 /** 408 * The HTTP <a href="http://tools.ietf.org/html/draft-evans-palmer-key-pinning">{@code 409 * Public-Key-Pins-Report-Only}</a> header field name. 410 * 411 * @since 15.0 412 */ 413 @Beta public static final String PUBLIC_KEY_PINS_REPORT_ONLY = "Public-Key-Pins-Report-Only"; 414 /** The HTTP {@code X-Requested-With} header field name. */ 415 public static final String X_REQUESTED_WITH = "X-Requested-With"; 416 /** The HTTP {@code X-User-IP} header field name. */ 417 public static final String X_USER_IP = "X-User-IP"; 418 /** 419 * The HTTP <a href="https://goo.gl/VKpXxa">{@code X-Download-Options}</a> header field name. 420 * 421 * <p>When the new X-Download-Options header is present with the value {@code noopen}, the user is 422 * prevented from opening a file download directly; instead, they must first save the file 423 * locally. 424 * 425 * @since 24.1 426 */ 427 @Beta public static final String X_DOWNLOAD_OPTIONS = "X-Download-Options"; 428 /** The HTTP {@code X-XSS-Protection} header field name. */ 429 public static final String X_XSS_PROTECTION = "X-XSS-Protection"; 430 /** 431 * The HTTP <a 432 * href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-DNS-Prefetch-Control">{@code 433 * X-DNS-Prefetch-Control}</a> header controls DNS prefetch behavior. Value can be "on" or "off". 434 * By default, DNS prefetching is "on" for HTTP pages and "off" for HTTPS pages. 435 */ 436 public static final String X_DNS_PREFETCH_CONTROL = "X-DNS-Prefetch-Control"; 437 /** 438 * The HTTP <a href="http://html.spec.whatwg.org/multipage/semantics.html#hyperlink-auditing"> 439 * {@code Ping-From}</a> header field name. 440 * 441 * @since 19.0 442 */ 443 public static final String PING_FROM = "Ping-From"; 444 /** 445 * The HTTP <a href="http://html.spec.whatwg.org/multipage/semantics.html#hyperlink-auditing"> 446 * {@code Ping-To}</a> header field name. 447 * 448 * @since 19.0 449 */ 450 public static final String PING_TO = "Ping-To"; 451 452 /** 453 * The HTTP <a 454 * href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Link_prefetching_FAQ#As_a_server_admin.2C_can_I_distinguish_prefetch_requests_from_normal_requests.3F">{@code 455 * Purpose}</a> header field name. 456 * 457 * @since 28.0 458 */ 459 public static final String PURPOSE = "Purpose"; 460 /** 461 * The HTTP <a 462 * href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Link_prefetching_FAQ#As_a_server_admin.2C_can_I_distinguish_prefetch_requests_from_normal_requests.3F">{@code 463 * X-Purpose}</a> header field name. 464 * 465 * @since 28.0 466 */ 467 public static final String X_PURPOSE = "X-Purpose"; 468 /** 469 * The HTTP <a 470 * href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Link_prefetching_FAQ#As_a_server_admin.2C_can_I_distinguish_prefetch_requests_from_normal_requests.3F">{@code 471 * X-Moz}</a> header field name. 472 * 473 * @since 28.0 474 */ 475 public static final String X_MOZ = "X-Moz"; 476 477 /** 478 * The HTTP <a href="https://wicg.github.io/ua-client-hints/#sec-ch-ua">{@code Sec-CH-UA}</a> 479 * header field name. 480 * 481 * @since 30.0 482 */ 483 public static final String SEC_CH_UA = "Sec-CH-UA"; 484 /** 485 * The HTTP <a href="https://wicg.github.io/ua-client-hints/#sec-ch-arch">{@code 486 * Sec-CH-UA-Arch}</a> header field name. 487 * 488 * @since 30.0 489 */ 490 public static final String SEC_CH_UA_ARCH = "Sec-CH-UA-Arch"; 491 /** 492 * The HTTP <a href="https://wicg.github.io/ua-client-hints/#sec-ch-model">{@code 493 * Sec-CH-UA-Model}</a> header field name. 494 * 495 * @since 30.0 496 */ 497 public static final String SEC_CH_UA_MODEL = "Sec-CH-UA-Model"; 498 /** 499 * The HTTP <a href="https://wicg.github.io/ua-client-hints/#sec-ch-platform">{@code 500 * Sec-CH-UA-Platform}</a> header field name. 501 * 502 * @since 30.0 503 */ 504 public static final String SEC_CH_UA_PLATFORM = "Sec-CH-UA-Platform"; 505 /** 506 * The HTTP <a href="https://wicg.github.io/ua-client-hints/#sec-ch-platform-version">{@code 507 * Sec-CH-UA-Platform-Version}</a> header field name. 508 * 509 * @since 30.0 510 */ 511 public static final String SEC_CH_UA_PLATFORM_VERSION = "Sec-CH-UA-Platform-Version"; 512 /** 513 * The HTTP <a href="https://wicg.github.io/ua-client-hints/#sec-ch-full-version">{@code 514 * Sec-CH-UA-Full-Version}</a> header field name. 515 * 516 * @since 30.0 517 */ 518 public static final String SEC_CH_UA_FULL_VERSION = "Sec-CH-UA-Full-Version"; 519 /** 520 * The HTTP <a href="https://wicg.github.io/ua-client-hints/#sec-ch-mobile">{@code 521 * Sec-CH-UA-Mobile}</a> header field name. 522 * 523 * @since 30.0 524 */ 525 public static final String SEC_CH_UA_MOBILE = "Sec-CH-UA-Mobile"; 526 527 /** 528 * The HTTP <a href="https://w3c.github.io/webappsec-fetch-metadata/">{@code Sec-Fetch-Dest}</a> 529 * header field name. 530 * 531 * @since 27.1 532 */ 533 public static final String SEC_FETCH_DEST = "Sec-Fetch-Dest"; 534 /** 535 * The HTTP <a href="https://w3c.github.io/webappsec-fetch-metadata/">{@code Sec-Fetch-Mode}</a> 536 * header field name. 537 * 538 * @since 27.1 539 */ 540 public static final String SEC_FETCH_MODE = "Sec-Fetch-Mode"; 541 /** 542 * The HTTP <a href="https://w3c.github.io/webappsec-fetch-metadata/">{@code Sec-Fetch-Site}</a> 543 * header field name. 544 * 545 * @since 27.1 546 */ 547 public static final String SEC_FETCH_SITE = "Sec-Fetch-Site"; 548 /** 549 * The HTTP <a href="https://w3c.github.io/webappsec-fetch-metadata/">{@code Sec-Fetch-User}</a> 550 * header field name. 551 * 552 * @since 27.1 553 */ 554 public static final String SEC_FETCH_USER = "Sec-Fetch-User"; 555 /** 556 * The HTTP <a href="https://w3c.github.io/webappsec-fetch-metadata/">{@code Sec-Metadata}</a> 557 * header field name. 558 * 559 * @since 26.0 560 */ 561 public static final String SEC_METADATA = "Sec-Metadata"; 562 /** 563 * The HTTP <a href="https://tools.ietf.org/html/draft-ietf-tokbind-https">{@code 564 * Sec-Token-Binding}</a> header field name. 565 * 566 * @since 25.1 567 */ 568 public static final String SEC_TOKEN_BINDING = "Sec-Token-Binding"; 569 /** 570 * The HTTP <a href="https://tools.ietf.org/html/draft-ietf-tokbind-ttrp">{@code 571 * Sec-Provided-Token-Binding-ID}</a> header field name. 572 * 573 * @since 25.1 574 */ 575 public static final String SEC_PROVIDED_TOKEN_BINDING_ID = "Sec-Provided-Token-Binding-ID"; 576 /** 577 * The HTTP <a href="https://tools.ietf.org/html/draft-ietf-tokbind-ttrp">{@code 578 * Sec-Referred-Token-Binding-ID}</a> header field name. 579 * 580 * @since 25.1 581 */ 582 public static final String SEC_REFERRED_TOKEN_BINDING_ID = "Sec-Referred-Token-Binding-ID"; 583 /** 584 * The HTTP <a href="https://tools.ietf.org/html/rfc6455">{@code Sec-WebSocket-Accept}</a> header 585 * field name. 586 * 587 * @since 28.0 588 */ 589 public static final String SEC_WEBSOCKET_ACCEPT = "Sec-WebSocket-Accept"; 590 /** 591 * The HTTP <a href="https://tools.ietf.org/html/rfc6455">{@code Sec-WebSocket-Extensions}</a> 592 * header field name. 593 * 594 * @since 28.0 595 */ 596 public static final String SEC_WEBSOCKET_EXTENSIONS = "Sec-WebSocket-Extensions"; 597 /** 598 * The HTTP <a href="https://tools.ietf.org/html/rfc6455">{@code Sec-WebSocket-Key}</a> header 599 * field name. 600 * 601 * @since 28.0 602 */ 603 public static final String SEC_WEBSOCKET_KEY = "Sec-WebSocket-Key"; 604 /** 605 * The HTTP <a href="https://tools.ietf.org/html/rfc6455">{@code Sec-WebSocket-Protocol}</a> 606 * header field name. 607 * 608 * @since 28.0 609 */ 610 public static final String SEC_WEBSOCKET_PROTOCOL = "Sec-WebSocket-Protocol"; 611 /** 612 * The HTTP <a href="https://tools.ietf.org/html/rfc6455">{@code Sec-WebSocket-Version}</a> header 613 * field name. 614 * 615 * @since 28.0 616 */ 617 public static final String SEC_WEBSOCKET_VERSION = "Sec-WebSocket-Version"; 618 /** 619 * The HTTP <a href="https://tools.ietf.org/html/rfc8586">{@code CDN-Loop}</a> header field name. 620 * 621 * @since 28.0 622 */ 623 public static final String CDN_LOOP = "CDN-Loop"; 624}