BASELINE NowYouCanUse.com
Web Platform Baseline Status Breakdown Total Features: 1219
Search:
Showing 3 of 3 features

2015

3 features
• July 2015
Widely Available

The X-Frame-Options HTTP header limits where a document may be embedded in an iframe. The X-Frame-Options: SAMEORIGIN header disallows embedding in another origin. The X-Frame-Options: DENY header disallows embedding in any context, regardless of origin.

Chrome 4
Firefox 4
Safari 4
Edge 12
Baseline Date: Jul 29, 2015
Widely Available

Cross-Origin Resource Sharing is an HTTP-header based mechanism that allows a server to indicate any origins (domain, scheme, or port) other than its own from which a browser should permit loading resources. Also known as CORS.

Chrome 4
Firefox 3.5
Safari 4
Edge 12
Baseline Date: Jul 29, 2015

The Strict-Transport-Security HTTP response header informs browsers that the site should only be accessed using HTTPS, and that any future attempts to access it using HTTP should automatically be converted to HTTPS. Also known as HSTS.

Chrome 4
Firefox 4
Safari 7
Edge 12
Baseline Date: Jul 29, 2015