_header.ts

export const Accept = "Accept",
  AcceptEncoding = "Accept-Encoding",
  Allow = "Allow",
  Authorization = "Authorization",
  ContentDisposition = "Content-Disposition",
  ContentEncoding = "Content-Encoding",
  ContentLength = "Content-Length",
  ContentType = "Content-Type",
  Cookie = "Cookie",
  SetCookie = "Set-Cookie",
  IfModifiedSince = "If-Modified-Since",
  LastModified = "Last-Modified",
  Location = "Location",
  Upgrade = "Upgrade",
  Vary = "Vary",
  WWWAuthenticate = "WWW-Authenticate",
  XForwardedFor = "X-Forwarded-For",
  XForwardedProto = "X-Forwarded-Proto",
  XForwardedProtocol = "X-Forwarded-Protocol",
  XForwardedSsl = "X-Forwarded-Ssl",
  XUrlScheme = "X-Url-Scheme",
  XHTTPMethodOverride = "X-HTTP-Method-Override",
  XRealIP = "X-Real-IP",
  XRequestID = "X-Request-ID",
  XRequestedWith = "X-Requested-With",
  Server = "Server",
  Origin = "Origin", // Access control
  AccessControlRequestMethod = "Access-Control-Request-Method",
  AccessControlRequestHeaders = "Access-Control-Request-Headers",
  AccessControlAllowOrigin = "Access-Control-Allow-Origin",
  AccessControlAllowMethods = "Access-Control-Allow-Methods",
  AccessControlAllowHeaders = "Access-Control-Allow-Headers",
  AccessControlAllowCredentials = "Access-Control-Allow-Credentials",
  AccessControlExposeHeaders = "Access-Control-Expose-Headers",
  AccessControlMaxAge = "Access-Control-Max-Age", // Security
  StrictTransportSecurity = "Strict-Transport-Security",
  XContentTypeOptions = "X-Content-Type-Options",
  XXSSProtection = "X-XSS-Protection",
  XFrameOptions = "X-Frame-Options",
  ContentSecurityPolicy = "Content-Security-Policy",
  ContentSecurityPolicyReportOnly = "Content-Security-Policy-Report-Only",
  XCSRFToken = "X-CSRF-Token",
  ReferrerPolicy = "Referrer-Policy";