Uvlio

Command Palette

Search for a command to run...

Back to Tools/Developerlocal

HTTP Response Header Reference

Browse common HTTP response headers, understand caching, security and delivery-related fields.

Local

Runs locally in your browser by default — nothing is uploaded first.

Search

Header name or keyword
Search stays local in the browser and filters the reference rows instantly.

Reference

Response header referenceCache-Control

Controls browser and CDN caching behavior.

Cache-ControlCaching
Meaning
Controls browser and CDN caching behavior.
Content-TypeContent
Meaning
Describes the MIME type of the response body.
Content-LengthContent
Meaning
Signals the body size in bytes.
Content-EncodingContent
Meaning
Shows compression such as gzip or br.
Content-DispositionDownload
Meaning
Suggests inline display or attachment download.
ETagCaching
Meaning
Entity tag used for validation and conditional requests.
Last-ModifiedCaching
Meaning
Timestamp for cache validation.
LocationRedirect
Meaning
Provides the redirect target or created resource URL.
Set-CookieSession
Meaning
Sets cookies in the browser.
Strict-Transport-SecuritySecurity
Meaning
Forces HTTPS for future visits.
Content-Security-PolicySecurity
Meaning
Controls which resources the page may load.
Access-Control-Allow-OriginCORS
Meaning
Declares which origins may read the response.
X-Frame-OptionsSecurity
Meaning
Limits whether the page can be framed.
Referrer-PolicySecurity
Meaning
Controls the Referer information sent by browsers.
Retry-AfterRate Limit
Meaning
Tells clients when to retry after 429 or 503.

HTTP Response Header Reference runs locally in your browser by default, so you can work with the content without uploading it first.

Look up common HTTP response headers and quickly understand caching, content delivery and security behavior.

  • Explain headers in API reviews
  • Check cache and security settings
  • Teach response header basics to teammates

Does HTTP Response Header Reference run locally or in the cloud?

HTTP Response Header Reference runs locally in your browser by default, so you can work with the content without uploading it first.

What usually comes after HTTP Response Header Reference?

A common next step is to continue into related workflows such as Code and Data Formatting Tools.

Is a JWT encrypted?

A standard signed JWT is not. The payload is base64url text that anyone with the token can read. Encryption requires the separate JWE format.

About HTTP Response Header Reference

Look up common HTTP response headers and quickly understand caching, content delivery and security behavior.

Common use cases

  • Explain headers in API reviews
  • Check cache and security settings
  • Teach response header basics to teammates

How to use

  1. Search by header name or keyword.
  2. Scan the matching rows.
  3. Copy the concise reference summary if needed.

Browse all Developer tools · All tools · Related guide