Origin - HTTP 编辑

The Origin request header indicates where a fetch originates from. It doesn't include any path information, but only the server name. It is sent with CORS requests, as well as with POST requests. It is similar to the Referer header, but, unlike this header, it doesn't disclose the whole path.

Note: The Origin header is not set on Fetch requests with a method of HEAD or GET (this behavior was corrected in Firefox 65 — see bug 1508661).

Syntax

Origin: null
Origin: <scheme> "://" <hostname> [ ":" <port> ]

Directives

<scheme>

The protocol that is used. Usually it is the HTTP protocol or its secured version, HTTPS.

<hostname>

The domain name of the server (for virtual hosting) or the IP.

<port> Optional

TCP port number on which the server is listening. If no port is given, the default port for the service requested (e.g., "80" for an HTTP URL) is implied.

Examples

Origin: https://developer.mozilla.org

Specifications

Browser compatibility

BCD tables only load in the browser

See also

• Host
• Referer
• Same-origin policy