Tag
http-headers
- Sep 10, 2026 CORS Preflight, Credentials, and the Response Sharing Rules The request classifications that decide whether a preflight happens, what the OPTIONS exchange negotiates, and why credentialed CORS forbids the wildcard origin. web platform
- Jun 17, 2026 The traceparent Header: Field Widths and Version Negotiation The exact byte layout of the W3C traceparent header, why its fields are fixed width, what the flags byte means, and how a version-00 parser must treat unknown versions. observability
- Sep 11, 2024 The baggage Header: Limits, Trust Boundaries, and Misuse How W3C Baggage carries arbitrary key-value pairs alongside a trace, the member and byte limits that force dropping, and why every entry crossing a trust boundary is untrusted input. observability