Sort and dedup http-request-headers-fields-large.txt

Miscellaneous/web/http-request-headers/http-request-headers-fields-large.txt

@@ -1,14 +1,18 @@
-A-IM
 Accept
 Accept-Application
+Accept-CH
 Accept-Charset
+Accept-CH-Lifetime
 Accept-Datetime
+Accepted
 Accept-Encoding
 Accept-Encodxng
 Accept-Language
+Accept-Patch
+Accept-Push-Policy
 Accept-Ranges
+Accept-Signature
 Accept-Version
-Accepted
 Access-Control-Allow-Credentials
 Access-Control-Allow-Headers
 Access-Control-Allow-Methods
@@ -17,18 +21,20 @@ Access-Control-Expose-Headers
 Access-Control-Max-Age
 Access-Control-Request-Headers
 Access-Control-Request-Method
-Access-Token
 Accesskey
+Access-Token
 Action
 Admin
 Age
+A-IM
 Ajax
 Akamai-Origin-Hop
 Allow
+Alt-Svc
 App
+Appcookie
 App-Env
 App-Key
-Appcookie
 Apply-To-Redirect-Ref
 Appname
 Appversion
@@ -38,15 +44,15 @@ Auth-Any
 Auth-Basic
 Auth-Digest
 Auth-Digest-Ie
+Authentication
 Auth-Gssneg
 Auth-Key
 Auth-Ntlm
+Authorization
 Auth-Password
 Auth-Realm
 Auth-Type
 Auth-User
-Authentication
-Authorization
 Bad-Gateway
 Bad-Request
 Bae-Env-Addr-Bcms
@@ -91,7 +97,9 @@ Ch
 Challenge-Response
 Charset
 Chunk-Size
+Clear-Site-Data
 Client
+Clientaddress
 Client-Address
 Client-Bad-Request
 Client-Conflict
@@ -107,6 +115,7 @@ Client-Error-Unspecified-Error
 Client-Expectation-Failed
 Client-Forbidden
 Client-Gone
+Clientip
 Client-Ip
 Client-IP
 Client-Length-Required
@@ -117,19 +126,17 @@ Client-Payment-Required
 Client-Precondition-Failed
 Client-Proxy-Auth-Required
 Client-Quirk-Mode
+Client-Requested-Range-Not-Possible
 Client-Request-Timeout
 Client-Request-Too-Large
 Client-Request-Uri-Too-Large
-Client-Requested-Range-Not-Possible
 Client-Unauthorized
 Client-Unsupported-Media-Type
-Clientaddress
-Clientip
 Cloudfront-Viewer-Country
 Cloudinary-Name
 Cloudinary-Public-Id
-Cloudinary-Version
 Cloudinaryurl
+Cloudinary-Version
 Cluster-Client-IP
 Code
 Coming-From
@@ -144,8 +151,8 @@ Content-Encoding
 Content-Language
 Content-Length
 Content-Location
-Content-MD5
 Content-Md5
+Content-MD5
 Content-Range
 Content-Security-Policy
 Content-Security-Policy-Report-Only
@@ -154,14 +161,14 @@ Content-Type-Xhtml
 Context-Path
 Continue
 Cookie
+Cookie2
 Cookie-Domain
 Cookie-Httponly
 Cookie-Parse-Raw
 Cookie-Path
+Cookies
 Cookie-Secure
 Cookie-Vars
-Cookie2
-Cookies
 Core-Base
 Correlates
 Created
@@ -188,12 +195,14 @@ Deflate-Type-Gzip
 Deflate-Type-Raw
 Deflate-Type-Zlib
 Delete
+Delta-Base
 Depth
 Destination
 Destroy
 Devblocksproxybase
 Devblocksproxyhost
 Devblocksproxyssl
+Device-Memory
 Device-Stock-Ua
 Digest
 Dir
@@ -201,8 +210,8 @@ Dir-Name
 Dir-Resource
 Disable-Gzip
 Dkim-Signature
-DNT
 Dnt
+DNT
 Download-Attachment
 Download-Bad-Url
 Download-Bz2
@@ -228,19 +237,13 @@ Download-Tar
 Download-Tgz
 Download-Url
 Download-Zip
+DPR
+Early-Data
 E-Encoding
 E-Header
 E-Invalid-Param
 E-Malformed-Headers
 E-Message-Type
-E-Querystring
-E-Request
-E-Request-Method
-E-Request-Pool
-E-Response
-E-Runtime
-E-Socket
-E-Url
 Enable-Gzip
 Enable-No-Cache-Headers
 Encoding-Stream-Flush-Full
@@ -248,15 +251,24 @@ Encoding-Stream-Flush-None
 Encoding-Stream-Flush-Sync
 Env-Silla-Environment
 Env-Vars
+E-Querystring
+E-Request
+E-Request-Method
+E-Request-Pool
+E-Response
 Error
 Error-1
 Error-2
 Error-3
 Error-4
 Error-Formatting-Html
+E-Runtime
+E-Socket
 Espo-Authorization
 Espo-Cgi-Auth
 Etag
+ETag
+E-Url
 Eve-Charid
 Eve-Charname
 Eve-Solarsystemid
@@ -264,8 +276,8 @@ Eve-Solarsystemname
 Eve-Trusted
 Ex-Copy-Movie
 Expect
-Expect-CT
 Expectation-Failed
+Expect-CT
 Expires
 Ext
 Failed-Dependency
@@ -274,8 +286,8 @@ Fastly-Client-Ip
 Fb-Appid
 Fb-Secret
 Feature-Policy
-File-Not-Found
 Filename
+File-Not-Found
 Files
 Files-Vars
 Fire-Breathing-Dragon
@@ -315,11 +327,12 @@ Header-Status-Server-Error
 Header-Status-Successful
 Home
 Host
+Hosti
 Host-Liveserver
 Host-Name
 Host-Unavailable
-Hosti
 Htaccess
+HTTP2-Settings
 Http-Accept
 Http-Accept-Encoding
 Http-Accept-Language
@@ -329,15 +342,14 @@ Http-Cookie
 Http-Host
 Http-Phone-Number
 Http-Referer
-Http-Url
-Http-User-Agent
-HTTP2-Settings
 Https
 Https-From-Lb
 Https-Keysize
 Https-Secretkeysize
 Https-Server-Issuer
 Https-Server-Subject
+Http-Url
+Http-User-Agent
 If
 If-Match
 If-Modified-Since
@@ -347,6 +359,7 @@ If-Posted-Before
 If-Range
 If-Unmodified-Since
 If-Unmodified-Since-Version
+IM
 Image
 Images
 Incap-Client-Ip
@@ -371,6 +384,7 @@ Kiss-Rpc
 Label
 Large-Allocation
 Last-Event-Id
+Last-Event-ID
 Last-Modified
 Length-Required
 Link
@@ -378,15 +392,15 @@ Local-Addr
 Local-Content-Sha1
 Local-Dir
 Location
-Lock-Token
 Locked
+Lock-Token
 Mail
 Mandatory
 Max-Conn
+Maxdataserviceversion
 Max-Forwards
 Max-Request-Size
 Max-Uri-Length
-Maxdataserviceversion
 Message
 Message-B
 Meth-
@@ -406,6 +420,8 @@ Meth-Mkactivity
 Meth-Mkcol
 Meth-Mkworkspace
 Meth-Move
+Method
+Method-Not-Allowed
 Meth-Options
 Meth-Post
 Meth-Propfind
@@ -417,14 +433,12 @@ Meth-Uncheckout
 Meth-Unlock
 Meth-Update
 Meth-Version-Control
-Method
-Method-Not-Allowed
 Mimetype
+Modauth
+Mode
 Mod-Env
 Mod-Rewrite
 Mod-Security-Message
-Modauth
-Mode
 Module-Class
 Module-Class-Path
 Module-Name
@@ -435,14 +449,15 @@ Msg-None
 Msg-Request
 Msg-Response
 Msisdn
-Multi-Status
 Multipart-Boundary
 Multiple-Choices
+Multi-Status
 Must
 My-Header
 Mysqlport
 Native-Sockets
 Negotiate
+NEL
 Nl
 No-Content
 Non-Authoritative
@@ -451,9 +466,9 @@ Not-Acceptable
 Not-Exists
 Not-Extended
 Not-Found
+Notification-Template
 Not-Implemented
 Not-Modified
-Notification-Template
 Oc-Chunked
 Ocs-Apirequest
 Ok
@@ -465,11 +480,12 @@ Only
 Opencart
 Options
 Organizer
-Orig_path_info
 Origin
-Origin-Isolation
 Originator
+Origin-Isolation
+Orig_path_info
 Overwrite
+P3P
 Params-Allow-Comma
 Params-Allow-Failure
 Params-Default
@@ -497,16 +513,17 @@ Php
 Php-Auth-Pw
 Php-Auth-User
 Phpthreads
+Ping-From
 Pink-Pony
 Port
 Portsensor-Auth
 Post
 Post-Error
 Post-Files
-Post-Vars
 Postredir-301
 Postredir-302
 Postredir-All
+Post-Vars
 Pragma
 Pragma-No-Cache
 Precondition-Failed
@@ -538,8 +555,8 @@ Public-Key-Pins
 Public-Key-Pins-Report-Only
 Pull
 Put
-Query-String
 Querystring
+Query-String
 Querystring-Type-Array
 Querystring-Type-Bool
 Querystring-Type-Float
@@ -558,14 +575,8 @@ Reason
 Reason-Phrase
 Recipient
 Redirect
-Redirect-Found
-Redirect-Perm
-Redirect-Post
-Redirect-Problem-Withoutwww
-Redirect-Problem-Withwww
-Redirect-Proxy
-Redirect-Temp
 Redirected-Accept-Language
+Redirect-Found
 Redirection-Found
 Redirection-Multiple-Choices
 Redirection-Not-Modified
@@ -574,6 +585,12 @@ Redirection-See-Other
 Redirection-Temporary
 Redirection-Unused
 Redirection-Use-Proxy
+Redirect-Perm
+Redirect-Post
+Redirect-Problem-Withoutwww
+Redirect-Problem-Withwww
+Redirect-Proxy
+Redirect-Temp
 Ref
 Referer
 Referrer
@@ -588,6 +605,8 @@ Remote-User
 Remote-Userhttps
 Report-To
 Request
+Request2-Tests-Base-Url
+Request2-Tests-Proxy-Host
 Request-Entity-Too-Large
 Request-Error
 Request-Error-File
@@ -611,14 +630,12 @@ Request-Method-Options
 Request-Method-Post
 Request-Method-Put
 Request-Method-Trace
-Request-Time-Out
 Request-Timeout
+Request-Time-Out
+Requesttoken
 Request-Uri
 Request-Uri-Too-Large
 Request-Vars
-Request2-Tests-Base-Url
-Request2-Tests-Proxy-Host
-Requesttoken
 Reset-Content
 Response
 Rest-Key
@@ -633,15 +650,24 @@ Save-Data
 Schedule-Reply
 Scheme
 Script-Name
+Sec-Fetch-Dest
+Sec-Fetch-Mode
+Sec-Fetch-Site
+Sec-Fetch-User
+Secretkey
 Sec-Websocket-Accept
+Sec-WebSocket-Accept
 Sec-Websocket-Extensions
+Sec-WebSocket-Extensions
 Sec-Websocket-Key
+Sec-WebSocket-Key
 Sec-Websocket-Key1
 Sec-Websocket-Key2
 Sec-Websocket-Origin
 Sec-Websocket-Protocol
+Sec-WebSocket-Protocol
 Sec-Websocket-Version
-Secretkey
+Sec-WebSocket-Version
 See-Other
 Self
 Send-X-Frame-Options
@@ -657,10 +683,12 @@ Server-Port-Secure
 Server-Protocol
 Server-Service-Unavailable
 Server-Software
+Server-Timing
 Server-Unsupported-Version
 Server-Vars
 Server-Varsabantecart
 Service-Unavailable
+Service-Worker-Allowed
 Session-Id-Tag
 Session-Vars
 Set-Cookie
@@ -670,6 +698,7 @@ Shib-Application-Id
 Shib-Identity-Provider
 Shib-Logouturl
 Shopilex
+Signed-Headers
 Slug
 Sn
 Soapaction
@@ -677,14 +706,15 @@ Socket-Connection-Err
 Socketlog
 Somevar
 Sourcemap
+SourceMap
 Sp-Client
 Sp-Host
 Ssl
 Ssl-Https
 Ssl-Offloaded
+Sslsessionid
 Ssl-Session-Id
 Ssl-Version-Any
-Sslsessionid
 Start
 Status
 Status-
@@ -696,8 +726,8 @@ Status-Code
 Status-Forbidden
 Status-Ok
 Status-Platform-403
-Str-Match
 Strict-Transport-Security
+Str-Match
 Success-Accepted
 Success-Created
 Success-No-Content
@@ -713,16 +743,16 @@ Support-Requests
 Support-Sslrequests
 Surrogate-Capability
 Switching-Protocols
-TE
 Te
+TE
 Temporary-Redirect
 Test
 Test-Config
 Test-Server-Path
 Test-Something-Anything
 Ticket
-Time-Out
 Timeout
+Time-Out
 Timing-Allow-Origin
 Title
 Tk
@@ -743,8 +773,8 @@ Ua-Resolution
 Ua-Voice
 Unauthorized
 Unencoded-Url
-Unit-Test-Mode
 UniqueId
+Unit-Test-Mode
 Unless-Modified-Since
 Unprocessable-Entity
 Unsupported-Media-Type
@@ -771,15 +801,15 @@ Url-Strip-User
 Use-Gzip
 Use-Proxy
 User
+Useragent
 User-Agent
+Useragent-Via
 User-Agent-Via
 User-Email
 User-Id
 User-Mail
 User-Name
 User-Photos
-Useragent
-Useragent-Via
 Util
 Variant-Also-Varies
 Vary
@@ -790,21 +820,23 @@ Version
 Version-1-0
 Version-1-1
 Version-Any
+Versioncode
 Version-None
 Version-Not-Supported
-Versioncode
 Via
 Viad
 Waf-Stuff-Below
+Want-Digest
 Wap-Connection
 Warning
-Web-Server-Api
 Webodf-Member-Id
 Webodf-Session-Id
 Webodf-Session-Revision
+Web-Server-Api
 Work-Directory
 Www-Address
 Www-Authenticate
+WWW-Authenticate
 X
 X-
 X-Aastra-Expmod1
@@ -814,10 +846,11 @@ X-Accel-Mapping
 X-Access-Token
 X-Advertiser-Id
 X-Ajax-Real-Method
+X_alto_ajax_key
 X-Alto-Ajax-Keyz
 X-Amz-Date
-X-Amz-Website-Redirect-Location
 X-Amzn-Remapped-Host
+X-Amz-Website-Redirect-Location
 X-Api-Key
 X-Api-Signature
 X-Api-Timestamp
@@ -826,19 +859,20 @@ X-Apple-Client-Application
 X-Apple-Store-Front
 X-Arr-Log-Id
 X-Arr-Ssl
-X-ATT-DeviceId
 X-Att-Deviceid
+X-ATT-DeviceId
+X-Authentication
+X-Authentication-Key
 X-Auth-Key
 X-Auth-Mode
+Xauthorization
+X-Authorization
 X-Auth-Password
 X-Auth-Service-Provider
 X-Auth-Token
 X-Auth-User
 X-Auth-Userid
 X-Auth-Username
-X-Authentication
-X-Authentication-Key
-X-Authorization
 X-Avantgo-Screensize
 X-Azc-Remote-Addr
 X-Bear-Ajax-Request
@@ -853,12 +887,12 @@ X-Chrome-Extension
 X-Cisco-Bbsm-Clientip
 X-Client-Host
 X-Client-Id
+X-Clientip
 X-Client-Ip
 X-Client-IP
 X-Client-Key
 X-Client-Os
 X-Client-Os-Ver
-X-Clientip
 X-Cluster-Client-Ip
 X-Codeception-Codecoverage
 X-Codeception-Codecoverage-Config
@@ -872,8 +906,8 @@ X-Content-Type-Options
 X-Correlation-ID
 X-Credentials-Request
 X-Csrf-Crumb
-X-Csrf-Token
 X-Csrftoken
+X-Csrf-Token
 X-Cuid
 X-Custom
 X-Dagd-Proxy
@@ -881,11 +915,12 @@ X-Davical-Testcase
 X-Dcmguid
 X-Debug-Test
 X-Device-User-Agent
-X-Download-Options
 X-Dialog
 X-Dns-Prefetch-Control
-X-Do-Not-Track
+X-DNS-Prefetch-Control
 X-Dokuwiki-Do
+X-Do-Not-Track
+X-Download-Options
 X-Drestcg
 X-Dsid
 X-Elgg-Apikey
@@ -902,11 +937,11 @@ X-Expected-Entity-Length
 X-Experience-Api-Version
 X-Fb-User-Remote-Addr
 X-File-Id
+X-Filename
 X-File-Name
 X-File-Resume
 X-File-Size
 X-File-Type
-X-Filename
 X-Firelogger
 X-Fireloggerauth
 X-Firephp-Version
@@ -916,8 +951,6 @@ X-Flx-Consumer-Secret
 X-Flx-Redirect-Url
 X-Foo
 X-Foo-Bar
-X-Forward-For
-X-Forward-Proto
 X-Forwarded
 X-Forwarded-By
 X-Forwarded-For
@@ -930,6 +963,9 @@ X-Forwarded-Scheme
 X-Forwarded-Server
 X-Forwarded-Ssl
 X-Forwarder-For
+X-Forward-For
+X-Forward-Proto
+X-Frame-Options
 X-From
 X-Gb-Shared-Secret
 X-Geoip-Country
@@ -942,6 +978,7 @@ X-Http-Destinationurl
 X-Http-Host-Override
 X-Http-Method
 X-Http-Method-Override
+X-HTTP-Method-Override
 X-Http-Path-Override
 X-Https
 X-Htx-Agent
@@ -972,8 +1009,8 @@ X-Mobile-Gateway
 X-Mobile-Ua
 X-Mosso-Dt
 X-Moz
-X-Ms-Policykey
 X-Msisdn
+X-Ms-Policykey
 X-Myqee-System-Debug
 X-Myqee-System-Hash
 X-Myqee-System-Isadmin
@@ -985,7 +1022,6 @@ X-Myqee-System-Time
 X-Network-Info
 X-Nfsn-Https
 X-Ning-Request-Uri
-X-No-WWW-Authenticate
 X-Nokia-Bearer
 X-Nokia-Connection-Mode
 X-Nokia-Gateway-Id
@@ -993,8 +1029,10 @@ X-Nokia-Ipaddress
 X-Nokia-Msisdn
 X-Nokia-Wia-Accept-Original
 X-Nokia-Wtls
+X-No-WWW-Authenticate
 X-Nuget-Apikey
 X-Oc-Mtime
+Xonnection
 X-Opera-Info
 X-Operamini-Features
 X-Operamini-Phone
@@ -1005,17 +1043,18 @@ X-Orchestra-Scheme
 X-Orig-Client
 X-Original-Host
 X-Original-Http-Command
+X-Originally-Forwarded-For
+X-Originally-Forwarded-Proto
 X-Original-Remote-Addr
 X-Original-Url
 X-Original-User-Agent
-X-Originally-Forwarded-For
-X-Originally-Forwarded-Proto
 X-Originating-Ip
 X-Originating-IP
 X-Os-Prefs
 X-Overlay
 X-Pagelet-Fragment
 X-Password
+Xpdb-Debugger
 X-Permitted-Cross-Domain-Policies
 X-Phabricator-Csrf
 X-Phpbb-Using-Plupload
@@ -1023,7 +1062,9 @@ X-Pjax
 X-Pjax-Container
 X-Powered-By
 X-Prototype-Version
+Xproxy
 X-Proxy-Url
+X-ProxyUser-Ip
 X-Pswd
 X-Purpose
 X-Qafoo-Profiler
@@ -1033,17 +1074,18 @@ X-Remote-IP
 X-Remote-Protocol
 X-Render-Partial
 X-Request
-X-Request-ID
+X-Requested-With
 X-Request-Id
+X-Request-ID
 X-Request-Signature
 X-Request-Start
 X-Request-Timestamp
-X-Requested-With
 X-Response-Format
 X-Rest-Cors
 X-Rest-Password
 X-Rest-Username
 X-Rewrite-Url
+Xroxy-Connection
 X-Sakura-Forwarded-For
 X-Scalr-Auth-Key
 X-Scalr-Auth-Token
@@ -1053,8 +1095,8 @@ X-Scheme
 X-Screen-Height
 X-Screen-Width
 X-Sendfile-Type
-X-Serial-Number
 X-Serialize
+X-Serial-Number
 X-Server-Id
 X-Server-Name
 X-Server-Port
@@ -1076,21 +1118,21 @@ X-Trace
 X-Twilio-Signature
 X-Ua-Device
 X-Ucbrowser-Device-Ua
-X-UIDH
 X-Uidh
+X-UIDH
 X-Unique-Id
 X-Uniquewcid
 X-Up-Calling-Line-Id
+X-Update
+X-Update-Range
 X-Up-Devcap-Iscolor
 X-Up-Devcap-Screendepth
 X-Up-Devcap-Screenpixels
-X-Up-Subno
-X-Update
-X-Update-Range
 X-Upload-Maxresolution
 X-Upload-Name
 X-Upload-Size
 X-Upload-Type
+X-Up-Subno
 X-Url-Scheme
 X-User
 X-User-Agent
@@ -1098,11 +1140,12 @@ X-Username
 X-Varnish
 X-Verify-Credentials-Authorization
 X-Vodafone-3gpdpcontext
-X-Wap-Client-Sdu-Size
 X-Wap-Clientid
+X-Wap-Client-Sdu-Size
 X-Wap-Gateway
 X-Wap-Network-Client-Ip
 X-Wap-Network-Client-Msisdn
+x-wap-profile
 X-Wap-Profile
 X-Wap-Proxy-Cookie
 X-Wap-Session-Id
@@ -1118,69 +1161,12 @@ X-Xhprof-Debug
 X-Xhr-Referer
 X-Xmlhttprequest
 X-Xpid
+X-XSS-Protection
+Xxx-Real-Ip
+Xxxxxxxxxxxxxxx
 X-Zikula-Ajax-Token
 X-Zotero-Version
 X-Ztgo-Bearerinfo
-X_alto_ajax_key
-Xauthorization
-Xonnection
-Xpdb-Debugger
-Xproxy
-Xroxy-Connection
-Xxx-Real-Ip
-Xxxxxxxxxxxxxxx
 Y
 Zotero-Api-Version
 Zotero-Write-Token
-Accept-Patch
-Alt-Svc
-Delta-Base
-ETag
-IM
-P3P
-WWW-Authenticate
-X-Frame-Options
-X-HTTP-Method-Override
-x-wap-profile
-Accept-CH
-Accept-CH-Lifetime
-Clear-Site-Data
-Cross-Origin-Resource-Policy
-DPR
-Device-Memory
-Early-Data
-Expect-CT
-Feature-Policy
-Sec-Fetch-Dest
-Sec-Fetch-Mode
-Sec-Fetch-Site
-Sec-Fetch-User
-Sec-WebSocket-Accept
-Server-Timing
-SourceMap
-Want-Digest
-X-DNS-Prefetch-Control
-X-ProxyUser-Ip
-X-XSS-Protection
-Public-Key-Pins
-Public-Key-Pins-Report-Only
-Sec-Fetch-Site
-Sec-Fetch-Mode
-Sec-Fetch-User
-Sec-Fetch-Dest
-Last-Event-ID
-Ping-From
-NEL
-Sec-WebSocket-Key
-Sec-WebSocket-Extensions
-Sec-WebSocket-Accept
-Sec-WebSocket-Protocol
-Sec-WebSocket-Version
-Accept-Push-Policy
-Accept-Signature
-Alt-Svc
-Date
-Signed-Headers
-Server-Timing
-Service-Worker-Allowed
-SourceMap