HTTP 헤더 검사기
Inspect HTTP response headers online to review caching, content type, security, redirects, and transport signals. 한국어 locale.
Make HTML structure easier to inspect
This tool displays HTTP headers from a response or supplied header text so you can inspect metadata such as content type, cache directives, cookies, redirects, and security policies. Headers describe one response observed through one path; they do not prove every client sees the same result.
Formatting is not HTML validation
HTTP headers are name-value fields exchanged with requests and responses. Some are end-to-end, some are hop-by-hop, and proxies or CDNs may add, remove, or rewrite them. Meaning depends on method, status, request headers, origin, and intermediary behavior.
How to format HTML
- Provide a response URL or paste headers, then review status, content type, cache controls, cookies, redirects, CORS, and security-related fields. Compare with the intended policy and test from relevant clients or regions before changing configuration.
- Provide a response URL or paste headers, then review status, content type, cache controls, cookies, redirects, CORS, and security-related fields. Compare with the intended policy and test from relevant clients or regions before changing configuration. Compare headers across redirects and clients.
Formatting method
- Read markup structure
The checker parses header lines, groups duplicate fields where appropriate, and highlights known directives or policy values. It may not reproduce negotiation, redirects, cookies, or proxy behavior unless a live response is supplied and permitted.
- Apply indentation
The checker parses header lines, groups duplicate fields where appropriate, and highlights known directives or policy values. It may not reproduce negotiation, redirects, cookies, or proxy behavior unless a live response is supplied and permitted.
- Preserve content
The checker parses header lines, groups duplicate fields where appropriate, and highlights known directives or policy values. It may not reproduce negotiation, redirects, cookies, or proxy behavior unless a live response is supplied and permitted.
Exact parser recovery, optional-tag handling, whitespace policy, embedded-language behavior, and error wording should be c...
Read the formatted result
A useful result identifies response status, header values, duplicate fields, and source time. Check whether a header was added by origin, CDN, or client. A present security header is not proof that its policy is correct or enforced everywhere.
흔한 실수
Common mistakes include checking only a homepage, ignoring redirects, assuming response headers equal request headers, treating CORS as authentication, missing cache variation, and exposing cookies or authorization values in a shared report.
Common mistakes include checking only a homepage, ignoring redirects, assuming response headers equal request headers, treating CORS as authentication, missing cache variation, and exposing cookies or authorization values in a shared report. Compare headers across redirects and clients.
제한 사항 및 특수 사례
The checker cannot guarantee browser enforcement, intermediary behavior, origin configuration, TLS, application security, or policy coverage across paths. Header names and values can be context-specific.
The checker cannot guarantee browser enforcement, intermediary behavior, origin configuration, TLS, application security, or policy coverage across paths. Header names and values can be context-specific. Compare headers across redirects and clients.
Examples
HTTP Headers Checker online — 1
What does a headers checker show?
Provide a response URL or paste headers, then review status, content type, cache controls, cookies, redirects, CORS, and security-related fields. Compare with the intended policy and test from relevant clients or regions before changing configuration.
A useful result identifies response status, header values, duplicate fields, and source time. Check whether a header was added by origin, CDN, or client. A present security header is not proof that its policy is correct or enforced everywhere.
HTTP Headers Checker online — 2
Does it inspect request headers?
Provide a response URL or paste headers, then review status, content type, cache controls, cookies, redirects, CORS, and security-related fields. Compare with the intended policy and test from relevant clients or regions before changing configuration.
A useful result identifies response status, header values, duplicate fields, and source time. Check whether a header was added by origin, CDN, or client. A present security header is not proof that its policy is correct or enforced everywhere.
HTTP Headers Checker online — 3
Why do redirects change headers?
Provide a response URL or paste headers, then review status, content type, cache controls, cookies, redirects, CORS, and security-related fields. Compare with the intended policy and test from relevant clients or regions before changing configuration.
A useful result identifies response status, header values, duplicate fields, and source time. Check whether a header was added by origin, CDN, or client. A present security header is not proof that its policy is correct or enforced everywhere.
HTTP Headers Checker online — 4
Can headers prove security?
Provide a response URL or paste headers, then review status, content type, cache controls, cookies, redirects, CORS, and security-related fields. Compare with the intended policy and test from relevant clients or regions before changing configuration.
A useful result identifies response status, header values, duplicate fields, and source time. Check whether a header was added by origin, CDN, or client. A present security header is not proof that its policy is correct or enforced everywhere.
HTTP Headers Checker online — 5
What is Cache-Control?
Provide a response URL or paste headers, then review status, content type, cache controls, cookies, redirects, CORS, and security-related fields. Compare with the intended policy and test from relevant clients or regions before changing configuration.
A useful result identifies response status, header values, duplicate fields, and source time. Check whether a header was added by origin, CDN, or client. A present security header is not proof that its policy is correct or enforced everywhere.
HTTP Headers Checker online — 6
Does it test CORS?
Provide a response URL or paste headers, then review status, content type, cache controls, cookies, redirects, CORS, and security-related fields. Compare with the intended policy and test from relevant clients or regions before changing configuration.
A useful result identifies response status, header values, duplicate fields, and source time. Check whether a header was added by origin, CDN, or client. A present security header is not proof that its policy is correct or enforced everywhere.
Frequently asked questions
What does a headers checker show?
Use the result as evidence for one response path and time. Verify origin, redirects, browser behavior, caching, CORS, and security policy separately.
Does it inspect request headers?
Use the result as evidence for one response path and time. Verify origin, redirects, browser behavior, caching, CORS, and security policy separately.
Why do redirects change headers?
Use the result as evidence for one response path and time. Verify origin, redirects, browser behavior, caching, CORS, and security policy separately.
Can headers prove security?
Use the result as evidence for one response path and time. Verify origin, redirects, browser behavior, caching, CORS, and security policy separately.
What is Cache-Control?
Use the result as evidence for one response path and time. Verify origin, redirects, browser behavior, caching, CORS, and security policy separately.
Does it test CORS?
Use the result as evidence for one response path and time. Verify origin, redirects, browser behavior, caching, CORS, and security policy separately.
Are cookies safe to paste?
Use the result as evidence for one response path and time. Verify origin, redirects, browser behavior, caching, CORS, and security policy separately.
Why do CDN headers differ?
Use the result as evidence for one response path and time. Verify origin, redirects, browser behavior, caching, CORS, and security policy separately.