third_party/WebKit/Source/platform/network/HTTPNames.json5

{
  metadata: {
    namespace: "HTTP",
    export: "PLATFORM_EXPORT",
  },

  data: [
    "GET",
    "HEAD",
    "POST",
    "OPTIONS",
    "Accept",
    "Accept-CH",
    "Access-Control-Allow-External",
    "Access-Control-Allow-Headers",
    "Access-Control-Allow-Methods",
    "Access-Control-Allow-Origin",
    "Access-Control-Expose-Headers",
    "Access-Control-Max-Age",
    "Access-Control-Request-External",
    "Access-Control-Request-Headers",
    "Access-Control-Request-Method",
    "Allow-CSP-From",
    "Cache-Control",
    "Content-DPR",
    "Content-Disposition",
    "Content-Language",
    "Content-Security-Policy",
    "Content-Security-Policy-Report-Only",
    "Content-Type",
    "ETag",
    "Expires",
    "Date",
    "Feature-Policy",
    "If-Match",
    "If-Modified-Since",
    "If-None-Match",
    "If-Range",
    "If-Unmodified-Since",
    "Last-Event-ID",
    "Last-Modified",
    "Link",
    "Location",
    "Origin",
    "Origin-Trial",
    "Ping-From",
    "Ping-To",
    "Pragma",
    "Purpose",
    "Range",
    "Referer",
    "Referrer-Policy",
    "Refresh",
    "Required-CSP",
    "Resource-Freshness",
    "Server-Timing",
    "SourceMap",
    "Suborigin",
    "Timing-Allow-Origin",
    "Upgrade-Insecure-Requests",
    "User-Agent",
    "Vary",
    "X-Content-Type-Options",
    "X-DNS-Prefetch-Control",
    "X-DevTools-Emulate-Network-Conditions-Client-Id",
    "X-Frame-Options",
    "X-SourceMap",
    "X-XSS-Protection",
  ],
}