🔍 HTTP Headers Checker

✕

📚 HTTP Headers Checker - Help Guide

🚀 How to Use

1. Enter a URL in the input field (include https:// or http://)

2. Configure options like User-Agent, request method, and CORS proxy

3. Add custom headers if needed

4. Click "Analyze Headers" to fetch and analyze HTTP headers

🔧 CORS Proxy Options

• AllOrigins (Default): Reliable proxy service with automatic fallback to CorsProxy.io if it fails
• CorsProxy.io: Alternative proxy service for bypassing CORS restrictions
• Direct (No Proxy): Direct request without proxy (may fail due to browser CORS restrictions)

Tip: If one proxy doesn't work, try the other option. Some websites may block certain proxy services.

📋 Features

• Header Categorization: Headers are organized into Security, Caching, Content, Server, and CORS categories
• Security Analysis: Compares your headers against security best practices
• Caching Analysis: Explains caching headers and their implications
• Server Detection: Identifies server technology from headers
• Redirect Tracking: Shows the full redirect chain
• Export Options: Copy headers, export to JSON or CSV

🔒 Security Headers Explained

• Strict-Transport-Security (HSTS): Enforces HTTPS connections
• Content-Security-Policy (CSP): Controls resources the browser can load
• X-Frame-Options: Prevents clickjacking attacks
• X-Content-Type-Options: Prevents MIME sniffing
• X-XSS-Protection: Enables XSS filtering
• Referrer-Policy: Controls referrer information
• Permissions-Policy: Controls browser features

💾 Caching Headers

• Cache-Control: Directives for caching mechanisms
• Expires: Expiration date for cached content
• ETag: Validator for cached resources
• Last-Modified: Last modification timestamp

🌐 CORS Headers

• Access-Control-Allow-Origin: Allowed origins for cross-origin requests
• Access-Control-Allow-Methods: Allowed HTTP methods
• Access-Control-Allow-Headers: Allowed request headers

⚠️ Limitations

Due to browser security restrictions (CORS), some headers may not be accessible when analyzing external websites. For complete header analysis, consider using server-side tools or browser developer tools.