487%2FRFC9110) . [ RFC ](/wiki/Request_for_Comments "Request for Comments") [ 9110 ](https://datatracker.ietf.org/doc/html/rfc9110) . 
  52. ** ^  ** [ Indicate the canonical version of a URL by responding with the Link rel="canonical" HTTP header ](https://support.google.com/webmasters/bin/answer.py?hl=en&answer=139394) Retrieved: 2012-02-09 
  53. ** ^  ** W3C [ P3P Work Suspended ](http://www.w3.org/P3P)
  54. ** ^  ** [ "Public Key Pinning Extension for HTTP" ](http://www.rfc-editor.org/rfc/rfc7469.txt) . IETF  . Retrieved  April 17,  2015  . 
  55. ** ^  ** [ "Retry-After" ](https://datatracker.ietf.org/doc/html/rfc9110#section-10.2.3) . [ _HTTP Semantics_ ](https://datatracker.ietf.org/doc/html/rfc9110) . June 2022. sec. 10.2.3. [ doi ](/wiki/Doi_\(identifier\) "Doi \(identifier\)") :  [ 10.17487/RFC9110 ](https://doi.org/10.17487%2FRFC9110) . [ RFC ](/wiki/Request_for_Comments "Request for Comments") [ 9110 ](https://datatracker.ietf.org/doc/html/rfc9110) . 
  56. ** ^  ** Ross, D.; Gondrom, T. (2013). [ "HTTP Header Field X-Frame-Options" ](https://tools.ietf.org/html/rfc7034) . IETF. [ doi ](/wiki/Doi_\(identifier\) "Doi \(identifier\)") :  [ 10.17487/RFC7034 ](https://doi.org/10.17487%2FRFC7034) . Retrieved  June 12,  2014  .  ` {{ [ cite journal ](/wiki/Template:Cite_journal "Template:Cite journal") }} ` :  Cite journal requires ` |journal= ` ( [ help ](/wiki/Help:CS1_errors#missing_periodical "Help:CS1 errors") ) 
  57. ** ^  ** [ "Content Security Policy Level 2" ](http://www.w3.org/TR/CSP11/#frame-ancestors-and-frame-options) . Retrieved  August 2,  2014  . 
  58. ** ^  ** [ "Content Security Policy" ](http://www.w3.org/TR/CSP/) . W3C. 2012  . Retrieved  April 28,  2017  . 
  59. ** ^  ** [ "Expect-CT" ](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Expect-CT) . _Mozilla Developer Network_ . Retrieved  July 23,  2021  . 
  60. ** ^  ** [ "NEL" ](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/NEL/) . _Mozilla Developer Network_ . 2021  . Retrieved  May 18,  2021  . 
  61. ** ^  ** [ "Permissions Policy" ](https://www.w3.org/TR/permissions-policy/) . W3C. 2020  . Retrieved  May 1,  2021  . 
  62. ** ^  ** [ "Am I FLoCed?" ](https://amifloced.org/) . EFF. 2021  . Retrieved  May 1,  2021  . 
  63. ** ^  ** [ "Define the HTTP Refresh header by annevk · Pull Request #2892 · whatwg/html" ](https://github.com/whatwg/html/pull/2892) . _GitHub_ . August 9, 2017  . Retrieved  April 17,  2021  . 
  64. ** ^  ** [ "CSP: report-to" ](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/report-to) . _Mozilla Developer Network_ . 2021  . Retrieved  May 18,  2021  . 
  65. ** ^  ** RFC [ 9110 ](https://datatracker.ietf.org/doc/html/rfc9110) : HTTP Semantics 
  66. ** ^  ** [ "Timing-Allow-Origin" ](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Timing-Allow-Origin) . _Mozilla Developer Network_ . Retrieved  January 25,  2018  . 
  67. ** ^  ** [ "Configuring servers for Ogg media" ](https://developer.mozilla.org/en-US/docs/Web/HTTP/Configuring_servers_for_Ogg_media#Serve_X-Content-Duration_headers) . May 26, 2014  . Retrieved  January 3,  2015  . 
  68. ** ^  ** [ "Clean up duration tracking and use mirroring for cross-thread access" ](https://bugzilla.mozilla.org/show_bug.cgi?id=1160695) . _Bugzilla@Mozilla_ . Retrieved  February 9,  2024  . 
  69. ** ^  ** Eric Lawrence (September 3, 2008). [ "IE8 Security Part VI: Beta 2 Update" ](http://blogs.msdn.com/b/ie/archive/2008/09/02/ie8-security-part-vi-beta-2-update.aspx) . Retrieved  September 28,  2010  . 
  70. ** ^  ** [ "Hosting - Google Chrome Extensions - Google Code" ](https://code.google.com/chrome/extensions/hosting.html) . Retrieved  June 14,  2012  . 
  71. ** ^  ** van Kesteren, Anne (August 26, 2016). [ "Fetch standard" ](https://fetch.spec.whatwg.org/#x-content-type-options-header) . _WHATWG_ . [ Archived ](https://web.archive.org/web/20160826132911/https://fetch.spec.whatwg.org/#x-content-type-options-hea