chore(http): Refresh headers ~[s->x]

[bsmth]

Description

This PR refreshes a few HTTP headers pages.

common changes:

• Add missing properties tables
• Capitalize Yes/No in properties table & move verbose notes/caveats under table
• Normalize The HTTP **`Header-Name`** (request|response) header in first sentence
• Add status text to HTTPStatus macros, e.g. {{HTTPStatus("406", "406 Not Acceptable")}}
• Improve Syntax section where possible
• Remove improper use of quotes in and around code
• Avoid escaping angle brackets in directive names in favor of backticks:

- \<directive>
+ `<directive>`

Motivation

Keeping content up-to-date, fixing formatting, unifying writing conventions

Additions:

• Glossary/Source_map
• Web/HTTP/Headers/X-Powered-By

TODOs

• BCD: X-XSS-Protection Add impl_url for removed X-XSS-Protection header browser-compat-data#25368
• BCD: x-content-type-options (outdated) Firefox 72 allows for MIME sniffing on top-level documents when no Content Type is set browser-compat-data#25371
• JS/API: origin keyed agent cluster docs (https://web.dev/articles/origin-agent-cluster)

[github-actions]

Preview URLs (47 pages)

• /en-US/docs/Glossary/Source_map
• /en-US/docs/Web/API/NDEFRecord/lang
• /en-US/docs/Web/HTTP/Headers/Connection
• /en-US/docs/Web/HTTP/Headers/Forwarded
• /en-US/docs/Web/HTTP/Headers/No-Vary-Search
• /en-US/docs/Web/HTTP/Headers/Origin-Agent-Cluster
• /en-US/docs/Web/HTTP/Headers/Permissions-Policy
• /en-US/docs/Web/HTTP/Headers/Proxy-Authenticate
• /en-US/docs/Web/HTTP/Headers/Proxy-Authorization
• /en-US/docs/Web/HTTP/Headers/Range
• /en-US/docs/Web/HTTP/Headers/Reporting-Endpoints
• /en-US/docs/Web/HTTP/Headers/Repr-Digest
• /en-US/docs/Web/HTTP/Headers/Server-Timing
• /en-US/docs/Web/HTTP/Headers/Server
• /en-US/docs/Web/HTTP/Headers/Service-Worker-Navigation-Preload
• /en-US/docs/Web/HTTP/Headers/Set-Cookie
• /en-US/docs/Web/HTTP/Headers/Set-Login
• /en-US/docs/Web/HTTP/Headers/SourceMap
• /en-US/docs/Web/HTTP/Headers/Speculation-Rules
• /en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
• /en-US/docs/Web/HTTP/Headers/Supports-Loading-Mode
• /en-US/docs/Web/HTTP/Headers/TE
• /en-US/docs/Web/HTTP/Headers/Timing-Allow-Origin
• /en-US/docs/Web/HTTP/Headers/Tk
• /en-US/docs/Web/HTTP/Headers/Trailer
• /en-US/docs/Web/HTTP/Headers/Transfer-Encoding
• /en-US/docs/Web/HTTP/Headers/Upgrade-Insecure-Requests
• /en-US/docs/Web/HTTP/Headers/Upgrade
• /en-US/docs/Web/HTTP/Headers/User-Agent
• /en-US/docs/Web/HTTP/Headers/Vary
• /en-US/docs/Web/HTTP/Headers/Via
• /en-US/docs/Web/HTTP/Headers/Viewport-Width
• /en-US/docs/Web/HTTP/Headers/WWW-Authenticate
• /en-US/docs/Web/HTTP/Headers/Want-Content-Digest
• /en-US/docs/Web/HTTP/Headers/Want-Repr-Digest
• /en-US/docs/Web/HTTP/Headers/Warning
• /en-US/docs/Web/HTTP/Headers/Width
• /en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
• /en-US/docs/Web/HTTP/Headers/X-DNS-Prefetch-Control
• /en-US/docs/Web/HTTP/Headers/X-Forwarded-For
• /en-US/docs/Web/HTTP/Headers/X-Forwarded-Host
• /en-US/docs/Web/HTTP/Headers/X-Forwarded-Proto
• /en-US/docs/Web/HTTP/Headers/X-Frame-Options
• /en-US/docs/Web/HTTP/Headers/X-Powered-By
• /en-US/docs/Web/HTTP/Headers/X-XSS-Protection
• /en-US/docs/Web/HTTP/Headers
• /en-US/docs/Web/HTTP/Messages

External URLs (37)

URL: /en-US/docs/Glossary/Source_map
Title: Source map

• https://firefox-source-docs.mozilla.org/devtools-user/debugger/how_to/use_a_source_map/index.html (1 time) (Note! This may be a new URL 👀)

---

URL: /en-US/docs/Web/HTTP/Headers/Viewport-Width
Title: Viewport-Width

• https://datatracker.ietf.org/doc/html/draft-ietf-httpbis-client-hints-07 (1 time) (Note! This may be a new URL 👀)
• https://wicg.github.io/responsive-image-client-hints/ (1 time) (Note! This may be a new URL 👀)

---

URL: /en-US/docs/Web/HTTP/Headers/WWW-Authenticate
Title: WWW-Authenticate

• https://www.iana.org/assignments/http-authschemes/http-authschemes.xhtml (1 time) (Note! This may be a new URL 👀)

---

URL: /en-US/docs/Web/HTTP/Headers/X-Forwarded-For
Title: X-Forwarded-For

• https://en.wikipedia.org/wiki/Private_network (1 time) (Note! This may be a new URL 👀)
• https://httptoolkit.com/blog/what-is-x-forwarded-for/ (1 time) (Note! This may be a new URL 👀)

---

URL: /en-US/docs/Web/HTTP/Headers/Proxy-Authenticate
Title: Proxy-Authenticate

• https://www.iana.org/assignments/http-authschemes/http-authschemes.xhtml (1 time) (Note! This may be a new URL 👀)

---

URL: /en-US/docs/Web/HTTP/Headers/Set-Login
Title: Set-Login

• Preventing silent timing attacks w3c-fedid/FedCM#447 (1 time) (Note! This may be a new URL 👀)

---

URL: /en-US/docs/Web/HTTP/Headers/Origin-Agent-Cluster
Title: Origin-Agent-Cluster

• https://tc39.es/ecma262/ (1 time) (Note! This may be a new URL 👀)

---

URL: /en-US/docs/Web/HTTP/Headers/Want-Repr-Digest
Title: Want-Repr-Digest

• https://developer.ebay.com/develop/guides/digital-signatures-for-apis (1 time) (Note! This may be a new URL 👀)

---

URL: /en-US/docs/Web/HTTP/Headers/Proxy-Authorization
Title: Proxy-Authorization

• https://www.iana.org/assignments/http-authschemes/http-authschemes.xhtml (1 time) (Note! This may be a new URL 👀)

---

URL: /en-US/docs/Web/HTTP/Headers/SourceMap
Title: SourceMap

• https://web.dev/articles/source-maps (1 time) (Note! This may be a new URL 👀)

---

URL: /en-US/docs/Web/HTTP/Headers/Vary
Title: Vary

• https://www.fastly.com/blog/best-practices-using-vary-header (1 time) (Note! This may be a new URL 👀)
• https://www.smashingmagazine.com/2017/11/understanding-vary-header/ (1 time) (Note! This may be a new URL 👀)

---

URL: /en-US/docs/Web/HTTP/Headers/TE
Title: TE

• https://en.wikipedia.org/wiki/LZ77_and_LZ78 (1 time) (Note! This may be a new URL 👀)
• https://en.wikipedia.org/wiki/LZW (1 time) (Note! This may be a new URL 👀)
• https://en.wikipedia.org/wiki/Zlib (1 time) (Note! This may be a new URL 👀)
• https://httpwg.org/specs/rfc9113.html (1 time) (Note! This may be a new URL 👀)
• https://httpwg.org/specs/rfc9114.html (1 time) (Note! This may be a new URL 👀)

---

URL: /en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
Title: X-Content-Type-Options

• https://fetch.spec.whatwg.org/ (2 times) (Note! This may be a new URL 👀)

---

URL: /en-US/docs/Web/HTTP/Headers/Width
Title: Width

• https://datatracker.ietf.org/doc/html/draft-ietf-httpbis-client-hints-07 (1 time) (Note! This may be a new URL 👀)
• https://developer.chrome.com/docs/privacy-security/user-agent-client-hints (1 time) (Note! This may be a new URL 👀)
• https://wicg.github.io/responsive-image-client-hints/ (1 time) (Note! This may be a new URL 👀)

---

URL: /en-US/docs/Web/HTTP/Headers/Want-Content-Digest
Title: Want-Content-Digest

• https://developer.ebay.com/develop/guides/digital-signatures-for-apis (1 time) (Note! This may be a new URL 👀)

---

URL: /en-US/docs/Web/HTTP/Headers/Set-Cookie
Title: Set-Cookie

• https://fetch.spec.whatwg.org/ (2 times) (Note! This may be a new URL 👀)

---

URL: /en-US/docs/Web/HTTP/Headers/Tk
Title: Tk

• https://en.wikipedia.org/wiki/Do_Not_Track (1 time) (Note! This may be a new URL 👀)
• https://globalprivacycontrol.org/ (2 times) (Note! This may be a new URL 👀)
• https://support.mozilla.org/en-US/kb/global-privacy-control?as=u&utm_source=inproduct (1 time) (Note! This may be a new URL 👀)
• https://www.eff.org/deeplinks/2011/02/what-does-track-do-not-track-mean (1 time) (Note! This may be a new URL 👀)
• https://www.eff.org/issues/do-not-track (1 time) (Note! This may be a new URL 👀)

---

URL: /en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
Title: Strict-Transport-Security

• https://blog.sidstamm.com/2010/08/http-strict-transport-security-has.html (1 time) (Note! This may be a new URL 👀)
• https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Strict_Transport_Security_Cheat_Sheet.html (1 time) (Note! This may be a new URL 👀)
• https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security (1 time) (Note! This may be a new URL 👀)
• https://hacks.mozilla.org/2010/08/firefox-4-http-strict-transport-security-force-https/ (1 time) (Note! This may be a new URL 👀)
• https://hstspreload.org (1 time) (Note! This may be a new URL 👀)
• https://hstspreload.org/ (2 times) (Note! This may be a new URL 👀)
• https://www.chromium.org/hsts/ (1 time) (Note! This may be a new URL 👀)

(comment last updated: 2024-12-09 15:59:50)

[github-actions]

This pull request has merge conflicts that must be resolved before it can be merged.

[bsmth]

This has cooked my brain :-0. Probably got a bit more sloppy towards the end.

Yes, I can imagine - thank you very much 🙏🏻

[hamishwillee]

Thanks @bsmth

I've added few minor comments/nits which you may or may not wish to consider. I think this all works. Approving for you to merge when you are happy,

[bsmth]

Thank you Hamish for the patience and review rounds on this, the feedback has been really valuable 🙏🏻

I'm going to land this one now and look at the TODOs as follow-up tasks.

[hamishwillee]

You are most welcome. Feels good when stuff like this goes in!