001/* 002 * Copyright (C) 2011 The Guava Authors 003 * 004 * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except 005 * in compliance with the License. You may obtain a copy of the License at 006 * 007 * http://www.apache.org/licenses/LICENSE-2.0 008 * 009 * Unless required by applicable law or agreed to in writing, software distributed under the License 010 * is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express 011 * or implied. See the License for the specific language governing permissions and limitations under 012 * the License. 013 */ 014 015package com.google.common.net; 016 017import com.google.common.annotations.Beta; 018import com.google.common.annotations.GwtCompatible; 019 020/** 021 * Contains constant definitions for the HTTP header field names. See: 022 * 023 * <ul> 024 * <li><a href="http://www.ietf.org/rfc/rfc2109.txt">RFC 2109</a> 025 * <li><a href="http://www.ietf.org/rfc/rfc2183.txt">RFC 2183</a> 026 * <li><a href="http://www.ietf.org/rfc/rfc2616.txt">RFC 2616</a> 027 * <li><a href="http://www.ietf.org/rfc/rfc2965.txt">RFC 2965</a> 028 * <li><a href="http://www.ietf.org/rfc/rfc5988.txt">RFC 5988</a> 029 * </ul> 030 * 031 * @author Kurt Alfred Kluever 032 * @since 11.0 033 */ 034@GwtCompatible 035public final class HttpHeaders { 036 private HttpHeaders() {} 037 038 // HTTP Request and Response header fields 039 040 /** The HTTP {@code Cache-Control} header field name. */ 041 public static final String CACHE_CONTROL = "Cache-Control"; 042 /** The HTTP {@code Content-Length} header field name. */ 043 public static final String CONTENT_LENGTH = "Content-Length"; 044 /** The HTTP {@code Content-Type} header field name. */ 045 public static final String CONTENT_TYPE = "Content-Type"; 046 /** The HTTP {@code Date} header field name. */ 047 public static final String DATE = "Date"; 048 /** The HTTP {@code Pragma} header field name. */ 049 public static final String PRAGMA = "Pragma"; 050 /** The HTTP {@code Via} header field name. */ 051 public static final String VIA = "Via"; 052 /** The HTTP {@code Warning} header field name. */ 053 public static final String WARNING = "Warning"; 054 055 // HTTP Request header fields 056 057 /** The HTTP {@code Accept} header field name. */ 058 public static final String ACCEPT = "Accept"; 059 /** The HTTP {@code Accept-Charset} header field name. */ 060 public static final String ACCEPT_CHARSET = "Accept-Charset"; 061 /** The HTTP {@code Accept-Encoding} header field name. */ 062 public static final String ACCEPT_ENCODING = "Accept-Encoding"; 063 /** The HTTP {@code Accept-Language} header field name. */ 064 public static final String ACCEPT_LANGUAGE = "Accept-Language"; 065 /** The HTTP {@code Access-Control-Request-Headers} header field name. */ 066 public static final String ACCESS_CONTROL_REQUEST_HEADERS = "Access-Control-Request-Headers"; 067 /** The HTTP {@code Access-Control-Request-Method} header field name. */ 068 public static final String ACCESS_CONTROL_REQUEST_METHOD = "Access-Control-Request-Method"; 069 /** The HTTP {@code Authorization} header field name. */ 070 public static final String AUTHORIZATION = "Authorization"; 071 /** The HTTP {@code Connection} header field name. */ 072 public static final String CONNECTION = "Connection"; 073 /** The HTTP {@code Cookie} header field name. */ 074 public static final String COOKIE = "Cookie"; 075 /** 076 * The HTTP <a href="https://fetch.spec.whatwg.org/#cross-origin-resource-policy-header">{@code 077 * Cross-Origin-Resource-Policy}</a> header field name. 078 * 079 * @since 28.0 080 */ 081 public static final String CROSS_ORIGIN_RESOURCE_POLICY = "Cross-Origin-Resource-Policy"; 082 /** 083 * The HTTP <a href="https://tools.ietf.org/html/rfc8470">{@code Early-Data}</a> header field 084 * name. 085 * 086 * @since 27.0 087 */ 088 public static final String EARLY_DATA = "Early-Data"; 089 /** The HTTP {@code Expect} header field name. */ 090 public static final String EXPECT = "Expect"; 091 /** The HTTP {@code From} header field name. */ 092 public static final String FROM = "From"; 093 /** 094 * The HTTP <a href="https://tools.ietf.org/html/rfc7239">{@code Forwarded}</a> header field name. 095 * 096 * @since 20.0 097 */ 098 public static final String FORWARDED = "Forwarded"; 099 /** 100 * The HTTP {@code Follow-Only-When-Prerender-Shown} header field name. 101 * 102 * @since 17.0 103 */ 104 @Beta 105 public static final String FOLLOW_ONLY_WHEN_PRERENDER_SHOWN = "Follow-Only-When-Prerender-Shown"; 106 /** The HTTP {@code Host} header field name. */ 107 public static final String HOST = "Host"; 108 /** 109 * The HTTP <a href="https://tools.ietf.org/html/rfc7540#section-3.2.1">{@code HTTP2-Settings} 110 * </a> header field name. 111 * 112 * @since 24.0 113 */ 114 public static final String HTTP2_SETTINGS = "HTTP2-Settings"; 115 /** The HTTP {@code If-Match} header field name. */ 116 public static final String IF_MATCH = "If-Match"; 117 /** The HTTP {@code If-Modified-Since} header field name. */ 118 public static final String IF_MODIFIED_SINCE = "If-Modified-Since"; 119 /** The HTTP {@code If-None-Match} header field name. */ 120 public static final String IF_NONE_MATCH = "If-None-Match"; 121 /** The HTTP {@code If-Range} header field name. */ 122 public static final String IF_RANGE = "If-Range"; 123 /** The HTTP {@code If-Unmodified-Since} header field name. */ 124 public static final String IF_UNMODIFIED_SINCE = "If-Unmodified-Since"; 125 /** The HTTP {@code Last-Event-ID} header field name. */ 126 public static final String LAST_EVENT_ID = "Last-Event-ID"; 127 /** The HTTP {@code Max-Forwards} header field name. */ 128 public static final String MAX_FORWARDS = "Max-Forwards"; 129 /** The HTTP {@code Origin} header field name. */ 130 public static final String ORIGIN = "Origin"; 131 /** 132 * The HTTP <a href="https://github.com/WICG/origin-isolation">{@code Origin-Isolation}</a> header 133 * field name. 134 * 135 * @since 30.1 136 */ 137 public static final String ORIGIN_ISOLATION = "Origin-Isolation"; 138 /** The HTTP {@code Proxy-Authorization} header field name. */ 139 public static final String PROXY_AUTHORIZATION = "Proxy-Authorization"; 140 /** The HTTP {@code Range} header field name. */ 141 public static final String RANGE = "Range"; 142 /** The HTTP {@code Referer} header field name. */ 143 public static final String REFERER = "Referer"; 144 /** 145 * The HTTP <a href="https://www.w3.org/TR/referrer-policy/">{@code Referrer-Policy}</a> header 146 * field name. 147 * 148 * @since 23.4 149 */ 150 public static final String REFERRER_POLICY = "Referrer-Policy"; 151 152 /** 153 * Values for the <a href="https://www.w3.org/TR/referrer-policy/">{@code Referrer-Policy}</a> 154 * header. 155 * 156 * @since 23.4 157 */ 158 public static final class ReferrerPolicyValues { 159 private ReferrerPolicyValues() {} 160 161 public static final String NO_REFERRER = "no-referrer"; 162 public static final String NO_REFFERER_WHEN_DOWNGRADE = "no-referrer-when-downgrade"; 163 public static final String SAME_ORIGIN = "same-origin"; 164 public static final String ORIGIN = "origin"; 165 public static final String STRICT_ORIGIN = "strict-origin"; 166 public static final String ORIGIN_WHEN_CROSS_ORIGIN = "origin-when-cross-origin"; 167 public static final String STRICT_ORIGIN_WHEN_CROSS_ORIGIN = "strict-origin-when-cross-origin"; 168 public static final String UNSAFE_URL = "unsafe-url"; 169 } 170 171 /** 172 * The HTTP <a href="https://www.w3.org/TR/service-workers/#update-algorithm">{@code 173 * Service-Worker}</a> header field name. 174 * 175 * @since 20.0 176 */ 177 public static final String SERVICE_WORKER = "Service-Worker"; 178 /** The HTTP {@code TE} header field name. */ 179 public static final String TE = "TE"; 180 /** The HTTP {@code Upgrade} header field name. */ 181 public static final String UPGRADE = "Upgrade"; 182 /** 183 * The HTTP <a href="https://w3c.github.io/webappsec-upgrade-insecure-requests/#preference">{@code 184 * Upgrade-Insecure-Requests}</a> header field name. 185 * 186 * @since 28.1 187 */ 188 public static final String UPGRADE_INSECURE_REQUESTS = "Upgrade-Insecure-Requests"; 189 190 /** The HTTP {@code User-Agent} header field name. */ 191 public static final String USER_AGENT = "User-Agent"; 192 193 // HTTP Response header fields 194 195 /** The HTTP {@code Accept-Ranges} header field name. */ 196 public static final String ACCEPT_RANGES = "Accept-Ranges"; 197 /** The HTTP {@code Access-Control-Allow-Headers} header field name. */ 198 public static final String ACCESS_CONTROL_ALLOW_HEADERS = "Access-Control-Allow-Headers"; 199 /** The HTTP {@code Access-Control-Allow-Methods} header field name. */ 200 public static final String ACCESS_CONTROL_ALLOW_METHODS = "Access-Control-Allow-Methods"; 201 /** The HTTP {@code Access-Control-Allow-Origin} header field name. */ 202 public static final String ACCESS_CONTROL_ALLOW_ORIGIN = "Access-Control-Allow-Origin"; 203 /** The HTTP {@code Access-Control-Allow-Credentials} header field name. */ 204 public static final String ACCESS_CONTROL_ALLOW_CREDENTIALS = "Access-Control-Allow-Credentials"; 205 /** The HTTP {@code Access-Control-Expose-Headers} header field name. */ 206 public static final String ACCESS_CONTROL_EXPOSE_HEADERS = "Access-Control-Expose-Headers"; 207 /** The HTTP {@code Access-Control-Max-Age} header field name. */ 208 public static final String ACCESS_CONTROL_MAX_AGE = "Access-Control-Max-Age"; 209 /** The HTTP {@code Age} header field name. */ 210 public static final String AGE = "Age"; 211 /** The HTTP {@code Allow} header field name. */ 212 public static final String ALLOW = "Allow"; 213 /** The HTTP {@code Content-Disposition} header field name. */ 214 public static final String CONTENT_DISPOSITION = "Content-Disposition"; 215 /** The HTTP {@code Content-Encoding} header field name. */ 216 public static final String CONTENT_ENCODING = "Content-Encoding"; 217 /** The HTTP {@code Content-Language} header field name. */ 218 public static final String CONTENT_LANGUAGE = "Content-Language"; 219 /** The HTTP {@code Content-Location} header field name. */ 220 public static final String CONTENT_LOCATION = "Content-Location"; 221 /** The HTTP {@code Content-MD5} header field name. */ 222 public static final String CONTENT_MD5 = "Content-MD5"; 223 /** The HTTP {@code Content-Range} header field name. */ 224 public static final String CONTENT_RANGE = "Content-Range"; 225 /** 226 * The HTTP <a href="http://w3.org/TR/CSP/#content-security-policy-header-field">{@code 227 * Content-Security-Policy}</a> header field name. 228 * 229 * @since 15.0 230 */ 231 public static final String CONTENT_SECURITY_POLICY = "Content-Security-Policy"; 232 /** 233 * The HTTP <a href="http://w3.org/TR/CSP/#content-security-policy-report-only-header-field"> 234 * {@code Content-Security-Policy-Report-Only}</a> header field name. 235 * 236 * @since 15.0 237 */ 238 public static final String CONTENT_SECURITY_POLICY_REPORT_ONLY = 239 "Content-Security-Policy-Report-Only"; 240 /** 241 * The HTTP nonstandard {@code X-Content-Security-Policy} header field name. It was introduced in 242 * <a href="https://www.w3.org/TR/2011/WD-CSP-20111129/">CSP v.1</a> and used by the Firefox until 243 * version 23 and the Internet Explorer version 10. Please, use {@link #CONTENT_SECURITY_POLICY} 244 * to pass the CSP. 245 * 246 * @since 20.0 247 */ 248 public static final String X_CONTENT_SECURITY_POLICY = "X-Content-Security-Policy"; 249 /** 250 * The HTTP nonstandard {@code X-Content-Security-Policy-Report-Only} header field name. It was 251 * introduced in <a href="https://www.w3.org/TR/2011/WD-CSP-20111129/">CSP v.1</a> and used by the 252 * Firefox until version 23 and the Internet Explorer version 10. Please, use {@link 253 * #CONTENT_SECURITY_POLICY_REPORT_ONLY} to pass the CSP. 254 * 255 * @since 20.0 256 */ 257 public static final String X_CONTENT_SECURITY_POLICY_REPORT_ONLY = 258 "X-Content-Security-Policy-Report-Only"; 259 /** 260 * The HTTP nonstandard {@code X-WebKit-CSP} header field name. It was introduced in <a 261 * href="https://www.w3.org/TR/2011/WD-CSP-20111129/">CSP v.1</a> and used by the Chrome until 262 * version 25. Please, use {@link #CONTENT_SECURITY_POLICY} to pass the CSP. 263 * 264 * @since 20.0 265 */ 266 public static final String X_WEBKIT_CSP = "X-WebKit-CSP"; 267 /** 268 * The HTTP nonstandard {@code X-WebKit-CSP-Report-Only} header field name. It was introduced in 269 * <a href="https://www.w3.org/TR/2011/WD-CSP-20111129/">CSP v.1</a> and used by the Chrome until 270 * version 25. Please, use {@link #CONTENT_SECURITY_POLICY_REPORT_ONLY} to pass the CSP. 271 * 272 * @since 20.0 273 */ 274 public static final String X_WEBKIT_CSP_REPORT_ONLY = "X-WebKit-CSP-Report-Only"; 275 /** 276 * The HTTP <a href="https://wicg.github.io/cross-origin-embedder-policy/#COEP">{@code 277 * Cross-Origin-Embedder-Policy}</a> header field name. 278 * 279 * @since 30.0 280 */ 281 public static final String CROSS_ORIGIN_EMBEDDER_POLICY = "Cross-Origin-Embedder-Policy"; 282 /** 283 * The HTTP <a href="https://wicg.github.io/cross-origin-embedder-policy/#COEP-RO">{@code 284 * Cross-Origin-Embedder-Policy-Report-Only}</a> header field name. 285 * 286 * @since 30.0 287 */ 288 public static final String CROSS_ORIGIN_EMBEDDER_POLICY_REPORT_ONLY = 289 "Cross-Origin-Embedder-Policy-Report-Only"; 290 /** 291 * The HTTP Cross-Origin-Opener-Policy header field name. 292 * 293 * @since 28.2 294 */ 295 public static final String CROSS_ORIGIN_OPENER_POLICY = "Cross-Origin-Opener-Policy"; 296 /** The HTTP {@code ETag} header field name. */ 297 public static final String ETAG = "ETag"; 298 /** The HTTP {@code Expires} header field name. */ 299 public static final String EXPIRES = "Expires"; 300 /** The HTTP {@code Last-Modified} header field name. */ 301 public static final String LAST_MODIFIED = "Last-Modified"; 302 /** The HTTP {@code Link} header field name. */ 303 public static final String LINK = "Link"; 304 /** The HTTP {@code Location} header field name. */ 305 public static final String LOCATION = "Location"; 306 /** 307 * The HTTP <a href="https://googlechrome.github.io/OriginTrials/#header">{@code Origin-Trial}</a> 308 * header field name. 309 * 310 * @since 27.1 311 */ 312 public static final String ORIGIN_TRIAL = "Origin-Trial"; 313 /** The HTTP {@code P3P} header field name. Limited browser support. */ 314 public static final String P3P = "P3P"; 315 /** The HTTP {@code Proxy-Authenticate} header field name. */ 316 public static final String PROXY_AUTHENTICATE = "Proxy-Authenticate"; 317 /** The HTTP {@code Refresh} header field name. Non-standard header supported by most browsers. */ 318 public static final String REFRESH = "Refresh"; 319 /** 320 * The HTTP <a href="https://www.w3.org/TR/reporting/">{@code Report-To}</a> header field name. 321 * 322 * @since 27.1 323 */ 324 public static final String REPORT_TO = "Report-To"; 325 /** The HTTP {@code Retry-After} header field name. */ 326 public static final String RETRY_AFTER = "Retry-After"; 327 /** The HTTP {@code Server} header field name. */ 328 public static final String SERVER = "Server"; 329 /** 330 * The HTTP <a href="https://www.w3.org/TR/server-timing/">{@code Server-Timing}</a> header field 331 * name. 332 * 333 * @since 23.6 334 */ 335 public static final String SERVER_TIMING = "Server-Timing"; 336 /** 337 * The HTTP <a href="https://www.w3.org/TR/service-workers/#update-algorithm">{@code 338 * Service-Worker-Allowed}</a> header field name. 339 * 340 * @since 20.0 341 */ 342 public static final String SERVICE_WORKER_ALLOWED = "Service-Worker-Allowed"; 343 /** The HTTP {@code Set-Cookie} header field name. */ 344 public static final String SET_COOKIE = "Set-Cookie"; 345 /** The HTTP {@code Set-Cookie2} header field name. */ 346 public static final String SET_COOKIE2 = "Set-Cookie2"; 347 348 /** 349 * The HTTP <a href="http://goo.gl/Dxx19N">{@code SourceMap}</a> header field name. 350 * 351 * @since 27.1 352 */ 353 @Beta public static final String SOURCE_MAP = "SourceMap"; 354 355 /** 356 * The HTTP <a href="http://tools.ietf.org/html/rfc6797#section-6.1">{@code 357 * Strict-Transport-Security}</a> header field name. 358 * 359 * @since 15.0 360 */ 361 public static final String STRICT_TRANSPORT_SECURITY = "Strict-Transport-Security"; 362 /** 363 * The HTTP <a href="http://www.w3.org/TR/resource-timing/#cross-origin-resources">{@code 364 * Timing-Allow-Origin}</a> header field name. 365 * 366 * @since 15.0 367 */ 368 public static final String TIMING_ALLOW_ORIGIN = "Timing-Allow-Origin"; 369 /** The HTTP {@code Trailer} header field name. */ 370 public static final String TRAILER = "Trailer"; 371 /** The HTTP {@code Transfer-Encoding} header field name. */ 372 public static final String TRANSFER_ENCODING = "Transfer-Encoding"; 373 /** The HTTP {@code Vary} header field name. */ 374 public static final String VARY = "Vary"; 375 /** The HTTP {@code WWW-Authenticate} header field name. */ 376 public static final String WWW_AUTHENTICATE = "WWW-Authenticate"; 377 378 // Common, non-standard HTTP header fields 379 380 /** The HTTP {@code DNT} header field name. */ 381 public static final String DNT = "DNT"; 382 /** The HTTP {@code X-Content-Type-Options} header field name. */ 383 public static final String X_CONTENT_TYPE_OPTIONS = "X-Content-Type-Options"; 384 /** The HTTP {@code X-Do-Not-Track} header field name. */ 385 public static final String X_DO_NOT_TRACK = "X-Do-Not-Track"; 386 /** The HTTP {@code X-Forwarded-For} header field name (superseded by {@code Forwarded}). */ 387 public static final String X_FORWARDED_FOR = "X-Forwarded-For"; 388 /** The HTTP {@code X-Forwarded-Proto} header field name. */ 389 public static final String X_FORWARDED_PROTO = "X-Forwarded-Proto"; 390 /** 391 * The HTTP <a href="http://goo.gl/lQirAH">{@code X-Forwarded-Host}</a> header field name. 392 * 393 * @since 20.0 394 */ 395 public static final String X_FORWARDED_HOST = "X-Forwarded-Host"; 396 /** 397 * The HTTP <a href="http://goo.gl/YtV2at">{@code X-Forwarded-Port}</a> header field name. 398 * 399 * @since 20.0 400 */ 401 public static final String X_FORWARDED_PORT = "X-Forwarded-Port"; 402 /** The HTTP {@code X-Frame-Options} header field name. */ 403 public static final String X_FRAME_OPTIONS = "X-Frame-Options"; 404 /** The HTTP {@code X-Powered-By} header field name. */ 405 public static final String X_POWERED_BY = "X-Powered-By"; 406 /** 407 * The HTTP <a href="http://tools.ietf.org/html/draft-evans-palmer-key-pinning">{@code 408 * Public-Key-Pins}</a> header field name. 409 * 410 * @since 15.0 411 */ 412 @Beta public static final String PUBLIC_KEY_PINS = "Public-Key-Pins"; 413 /** 414 * The HTTP <a href="http://tools.ietf.org/html/draft-evans-palmer-key-pinning">{@code 415 * Public-Key-Pins-Report-Only}</a> header field name. 416 * 417 * @since 15.0 418 */ 419 @Beta public static final String PUBLIC_KEY_PINS_REPORT_ONLY = "Public-Key-Pins-Report-Only"; 420 /** 421 * The HTTP {@code X-Request-ID} header field name. 422 * 423 * @since 30.1 424 */ 425 public static final String X_REQUEST_ID = "X-Request-ID"; 426 /** The HTTP {@code X-Requested-With} header field name. */ 427 public static final String X_REQUESTED_WITH = "X-Requested-With"; 428 /** The HTTP {@code X-User-IP} header field name. */ 429 public static final String X_USER_IP = "X-User-IP"; 430 /** 431 * The HTTP <a href="https://goo.gl/VKpXxa">{@code X-Download-Options}</a> header field name. 432 * 433 * <p>When the new X-Download-Options header is present with the value {@code noopen}, the user is 434 * prevented from opening a file download directly; instead, they must first save the file 435 * locally. 436 * 437 * @since 24.1 438 */ 439 @Beta public static final String X_DOWNLOAD_OPTIONS = "X-Download-Options"; 440 /** The HTTP {@code X-XSS-Protection} header field name. */ 441 public static final String X_XSS_PROTECTION = "X-XSS-Protection"; 442 /** 443 * The HTTP <a 444 * href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-DNS-Prefetch-Control">{@code 445 * X-DNS-Prefetch-Control}</a> header controls DNS prefetch behavior. Value can be "on" or "off". 446 * By default, DNS prefetching is "on" for HTTP pages and "off" for HTTPS pages. 447 */ 448 public static final String X_DNS_PREFETCH_CONTROL = "X-DNS-Prefetch-Control"; 449 /** 450 * The HTTP <a href="http://html.spec.whatwg.org/multipage/semantics.html#hyperlink-auditing"> 451 * {@code Ping-From}</a> header field name. 452 * 453 * @since 19.0 454 */ 455 public static final String PING_FROM = "Ping-From"; 456 /** 457 * The HTTP <a href="http://html.spec.whatwg.org/multipage/semantics.html#hyperlink-auditing"> 458 * {@code Ping-To}</a> header field name. 459 * 460 * @since 19.0 461 */ 462 public static final String PING_TO = "Ping-To"; 463 464 /** 465 * The HTTP <a 466 * href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Link_prefetching_FAQ#As_a_server_admin.2C_can_I_distinguish_prefetch_requests_from_normal_requests.3F">{@code 467 * Purpose}</a> header field name. 468 * 469 * @since 28.0 470 */ 471 public static final String PURPOSE = "Purpose"; 472 /** 473 * The HTTP <a 474 * href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Link_prefetching_FAQ#As_a_server_admin.2C_can_I_distinguish_prefetch_requests_from_normal_requests.3F">{@code 475 * X-Purpose}</a> header field name. 476 * 477 * @since 28.0 478 */ 479 public static final String X_PURPOSE = "X-Purpose"; 480 /** 481 * The HTTP <a 482 * href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Link_prefetching_FAQ#As_a_server_admin.2C_can_I_distinguish_prefetch_requests_from_normal_requests.3F">{@code 483 * X-Moz}</a> header field name. 484 * 485 * @since 28.0 486 */ 487 public static final String X_MOZ = "X-Moz"; 488 489 /** 490 * The HTTP <a href="https://wicg.github.io/ua-client-hints/#sec-ch-ua">{@code Sec-CH-UA}</a> 491 * header field name. 492 * 493 * @since 30.0 494 */ 495 public static final String SEC_CH_UA = "Sec-CH-UA"; 496 /** 497 * The HTTP <a href="https://wicg.github.io/ua-client-hints/#sec-ch-arch">{@code 498 * Sec-CH-UA-Arch}</a> header field name. 499 * 500 * @since 30.0 501 */ 502 public static final String SEC_CH_UA_ARCH = "Sec-CH-UA-Arch"; 503 /** 504 * The HTTP <a href="https://wicg.github.io/ua-client-hints/#sec-ch-model">{@code 505 * Sec-CH-UA-Model}</a> header field name. 506 * 507 * @since 30.0 508 */ 509 public static final String SEC_CH_UA_MODEL = "Sec-CH-UA-Model"; 510 /** 511 * The HTTP <a href="https://wicg.github.io/ua-client-hints/#sec-ch-platform">{@code 512 * Sec-CH-UA-Platform}</a> header field name. 513 * 514 * @since 30.0 515 */ 516 public static final String SEC_CH_UA_PLATFORM = "Sec-CH-UA-Platform"; 517 /** 518 * The HTTP <a href="https://wicg.github.io/ua-client-hints/#sec-ch-platform-version">{@code 519 * Sec-CH-UA-Platform-Version}</a> header field name. 520 * 521 * @since 30.0 522 */ 523 public static final String SEC_CH_UA_PLATFORM_VERSION = "Sec-CH-UA-Platform-Version"; 524 /** 525 * The HTTP <a href="https://wicg.github.io/ua-client-hints/#sec-ch-full-version">{@code 526 * Sec-CH-UA-Full-Version}</a> header field name. 527 * 528 * @since 30.0 529 */ 530 public static final String SEC_CH_UA_FULL_VERSION = "Sec-CH-UA-Full-Version"; 531 /** 532 * The HTTP <a href="https://wicg.github.io/ua-client-hints/#sec-ch-mobile">{@code 533 * Sec-CH-UA-Mobile}</a> header field name. 534 * 535 * @since 30.0 536 */ 537 public static final String SEC_CH_UA_MOBILE = "Sec-CH-UA-Mobile"; 538 539 /** 540 * The HTTP <a href="https://w3c.github.io/webappsec-fetch-metadata/">{@code Sec-Fetch-Dest}</a> 541 * header field name. 542 * 543 * @since 27.1 544 */ 545 public static final String SEC_FETCH_DEST = "Sec-Fetch-Dest"; 546 /** 547 * The HTTP <a href="https://w3c.github.io/webappsec-fetch-metadata/">{@code Sec-Fetch-Mode}</a> 548 * header field name. 549 * 550 * @since 27.1 551 */ 552 public static final String SEC_FETCH_MODE = "Sec-Fetch-Mode"; 553 /** 554 * The HTTP <a href="https://w3c.github.io/webappsec-fetch-metadata/">{@code Sec-Fetch-Site}</a> 555 * header field name. 556 * 557 * @since 27.1 558 */ 559 public static final String SEC_FETCH_SITE = "Sec-Fetch-Site"; 560 /** 561 * The HTTP <a href="https://w3c.github.io/webappsec-fetch-metadata/">{@code Sec-Fetch-User}</a> 562 * header field name. 563 * 564 * @since 27.1 565 */ 566 public static final String SEC_FETCH_USER = "Sec-Fetch-User"; 567 /** 568 * The HTTP <a href="https://w3c.github.io/webappsec-fetch-metadata/">{@code Sec-Metadata}</a> 569 * header field name. 570 * 571 * @since 26.0 572 */ 573 public static final String SEC_METADATA = "Sec-Metadata"; 574 /** 575 * The HTTP <a href="https://tools.ietf.org/html/draft-ietf-tokbind-https">{@code 576 * Sec-Token-Binding}</a> header field name. 577 * 578 * @since 25.1 579 */ 580 public static final String SEC_TOKEN_BINDING = "Sec-Token-Binding"; 581 /** 582 * The HTTP <a href="https://tools.ietf.org/html/draft-ietf-tokbind-ttrp">{@code 583 * Sec-Provided-Token-Binding-ID}</a> header field name. 584 * 585 * @since 25.1 586 */ 587 public static final String SEC_PROVIDED_TOKEN_BINDING_ID = "Sec-Provided-Token-Binding-ID"; 588 /** 589 * The HTTP <a href="https://tools.ietf.org/html/draft-ietf-tokbind-ttrp">{@code 590 * Sec-Referred-Token-Binding-ID}</a> header field name. 591 * 592 * @since 25.1 593 */ 594 public static final String SEC_REFERRED_TOKEN_BINDING_ID = "Sec-Referred-Token-Binding-ID"; 595 /** 596 * The HTTP <a href="https://tools.ietf.org/html/rfc6455">{@code Sec-WebSocket-Accept}</a> header 597 * field name. 598 * 599 * @since 28.0 600 */ 601 public static final String SEC_WEBSOCKET_ACCEPT = "Sec-WebSocket-Accept"; 602 /** 603 * The HTTP <a href="https://tools.ietf.org/html/rfc6455">{@code Sec-WebSocket-Extensions}</a> 604 * header field name. 605 * 606 * @since 28.0 607 */ 608 public static final String SEC_WEBSOCKET_EXTENSIONS = "Sec-WebSocket-Extensions"; 609 /** 610 * The HTTP <a href="https://tools.ietf.org/html/rfc6455">{@code Sec-WebSocket-Key}</a> header 611 * field name. 612 * 613 * @since 28.0 614 */ 615 public static final String SEC_WEBSOCKET_KEY = "Sec-WebSocket-Key"; 616 /** 617 * The HTTP <a href="https://tools.ietf.org/html/rfc6455">{@code Sec-WebSocket-Protocol}</a> 618 * header field name. 619 * 620 * @since 28.0 621 */ 622 public static final String SEC_WEBSOCKET_PROTOCOL = "Sec-WebSocket-Protocol"; 623 /** 624 * The HTTP <a href="https://tools.ietf.org/html/rfc6455">{@code Sec-WebSocket-Version}</a> header 625 * field name. 626 * 627 * @since 28.0 628 */ 629 public static final String SEC_WEBSOCKET_VERSION = "Sec-WebSocket-Version"; 630 /** 631 * The HTTP <a href="https://tools.ietf.org/html/rfc8586">{@code CDN-Loop}</a> header field name. 632 * 633 * @since 28.0 634 */ 635 public static final String CDN_LOOP = "CDN-Loop"; 636}