"New on the Web": For a given set of browsers, what APIs became stable and when, ordered reverse chronologically.
It's a great source of information for posts like this
Below is a list of features that are in Chrome and Chrome Android, ordered reverse chronologically by when they became stable (i.e, available in the last browser).
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.No-Vary-Search.http_cache π | Chrome | 9/30/2025 | Chrome Android | 1/13/2026 | 105 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.No-Vary-Search π | Chrome | 9/30/2025 | Chrome Android | 9/30/2025 | Chrome: Before Chrome 127, speculation rules are only supported for navigational prefetch, not prerender.Chrome: Before Chrome 141, HTTP cache is not supported.Chrome Android: Before Chrome Android 127, speculation rules are only supported for navigational prefetch, not prerender.Chrome Android: Before Chrome Android 141, HTTP cache is not supported.Edge: Before Edge 127, speculation rules are only supported for navigational prefetch, not prerender.Edge: Before Edge 141, HTTP cache is not supported.Opera: Before Opera 113, speculation rules are only supported for navigational prefetch, not prerender.Opera: Before Opera 125, HTTP cache is not supported.Opera Android: Before Opera Android 84, speculation rules are only supported for navigational prefetch, not prerender.Opera Android: Before Opera Android 93, HTTP cache is not supported.Samsung Internet: Before Samsung Internet 28.0, speculation rules are only supported for navigational prefetch, not prerender.Samsung Internet: Before Samsung Internet false, HTTP cache is not supported.WebView Android: Before WebView Android 127, speculation rules are only supported for navigational prefetch, not prerender.WebView Android: Before WebView Android 141, HTTP cache is not supported. | |
| http.headers.Permissions-Policy.aria-notify | Chrome | 9/30/2025 | Chrome Android | 9/30/2025 | Chrome: Not supported on ChromeOS.Chrome Android: Not supported on ChromeOS.Edge: Not supported on ChromeOS.Opera: Not supported on ChromeOS.Opera Android: Not supported on ChromeOS.WebView Android: Not supported on ChromeOS. | |
| http.headers.Set-Cookie.http_host-http_prefixes | Chrome | 9/2/2025 | Chrome Android | 9/2/2025 | Firefox: __Host-Http- is supported under its original name __HostHttp-. See bug 1982555.Firefox for Android: __Host-Http- is supported under its original name __HostHttp-. See bug 1982555. |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Clear-Site-Data.prefetchCache | Chrome | 6/24/2025 | Chrome Android | 6/24/2025 | ||
| http.headers.Clear-Site-Data.prerenderCache | Chrome | 6/24/2025 | Chrome Android | 6/24/2025 | ||
| http.headers.Integrity-Policy π | Chrome | 6/24/2025 | Chrome Android | 6/24/2025 | Firefox: Reporting endpoints are ignored (violations are logged to console).Firefox for Android: Reporting endpoints are ignored (violations are logged to console). | |
| http.headers.Integrity-Policy.blocked-destinations_script π | Chrome | 6/24/2025 | Chrome Android | 6/24/2025 | ||
| http.headers.Integrity-Policy-Report-Only π | Chrome | 6/24/2025 | Chrome Android | 6/24/2025 | Firefox: Reporting endpoints are ignored (violations are logged to console).Firefox for Android: Reporting endpoints are ignored (violations are logged to console). | |
| http.headers.Integrity-Policy-Report-Only.blocked-destinations_script π | Chrome | 6/24/2025 | Chrome Android | 6/24/2025 | ||
| http.mixed-content.private_network_access π | Chrome | 6/24/2025 | Chrome Android | 6/24/2025 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Sec-Speculation-Tags π | Chrome | 4/29/2025 | Chrome Android | 4/29/2025 | ||
| http.headers.Feature-Policy.deferred-fetch π | Chrome | 4/1/2025 | Chrome Android | 4/1/2025 | ||
| http.headers.Feature-Policy.deferred-fetch-minimal π | Chrome | 4/1/2025 | Chrome Android | 4/1/2025 | ||
| http.headers.Permissions-Policy.deferred-fetch π | Chrome | 4/1/2025 | Chrome Android | 4/1/2025 | ||
| http.headers.Permissions-Policy.deferred-fetch-minimal π | Chrome | 4/1/2025 | Chrome Android | 4/1/2025 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Activate-Storage-Access π | Chrome | 2/4/2025 | Chrome Android | 2/4/2025 | ||
| http.headers.Sec-Fetch-Storage-Access π | Chrome | 2/4/2025 | Chrome Android | 2/4/2025 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Cross-Origin-Opener-Policy.noopener-allow-popups π | Chrome | 11/12/2024 | Chrome Android | 11/12/2024 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Accept-Encoding.dcb | Chrome | 10/15/2024 | Chrome Android | 10/15/2024 | ||
| http.headers.Accept-Encoding.dcz | Chrome | 10/15/2024 | Chrome Android | 10/15/2024 | ||
| http.headers.Available-Dictionary π | Chrome | 10/15/2024 | Chrome Android | 10/15/2024 | ||
| http.headers.Content-Encoding.dcb | Chrome | 10/15/2024 | Chrome Android | 10/15/2024 | ||
| http.headers.Content-Encoding.dcz | Chrome | 10/15/2024 | Chrome Android | 10/15/2024 | ||
| http.headers.Dictionary-ID π | Chrome | 10/15/2024 | Chrome Android | 10/15/2024 | ||
| http.headers.Use-As-Dictionary π | Chrome | 10/15/2024 | Chrome Android | 10/15/2024 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.No-Vary-Search.speculation_rules_prerender π | Chrome | 7/23/2024 | Chrome Android | 7/23/2024 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Content-Security-Policy.fenced-frame-src π | Chrome | 6/11/2024 | Chrome Android | 6/11/2024 | ||
| http.headers.Sec-Fetch-Dest.fencedframe | Chrome | 6/11/2024 | Chrome Android | 6/11/2024 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Priority π | Chrome | 4/16/2024 | Chrome Android | 4/16/2024 | ||
| http.headers.Sec-CH-UA-Form-Factors π | Chrome | 4/16/2024 | Chrome Android | 4/16/2024 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Accept-Encoding.zstd π | Chrome | 3/19/2024 | Chrome Android | 3/19/2024 | Safari: Before macOS 26.3 Tahoe, this header value is not sent. | |
| http.headers.Content-Encoding.zstd π | Chrome | 3/19/2024 | Chrome Android | 3/19/2024 | Safari: Before macOS 26.3 Tahoe, Safari cannot decode Zstandard responses. |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.No-Vary-Search.speculation_rules_prefetch π | Chrome | 1/23/2024 | Chrome Android | 1/23/2024 | ||
| http.headers.Speculation-Rules π | Chrome | 1/23/2024 | Chrome Android | 1/23/2024 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Set-Login π | Chrome | 12/5/2023 | Chrome Android | 12/5/2023 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Sec-CH-Prefers-Reduced-Transparency π | Chrome | 10/31/2023 | Chrome Android | 10/31/2023 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Attribution-Reporting-Eligible π | Chrome | 9/12/2023 | Chrome Android | 9/12/2023 | ||
| http.headers.Attribution-Reporting-Register-Source π | Chrome | 9/12/2023 | Chrome Android | 9/12/2023 | ||
| http.headers.Attribution-Reporting-Register-Trigger π | Chrome | 9/12/2023 | Chrome Android | 9/12/2023 | ||
| http.headers.Attribution-Reporting-Support π | Chrome | 9/12/2023 | Chrome Android | 9/12/2023 | ||
| http.headers.Authorization.Digest.SHA-256 | Chrome | 9/12/2023 | Chrome Android | 9/12/2023 | ||
| http.headers.Clear-Site-Data.clientHints π | Chrome | 9/12/2023 | Chrome Android | 9/12/2023 | ||
| http.headers.Clear-Site-Data.wildcard π | Chrome | 9/12/2023 | Chrome Android | 9/12/2023 | ||
| http.headers.Feature-Policy.attribution-reporting π | Chrome | 9/12/2023 | Chrome Android | 9/12/2023 | ||
| http.headers.Permissions-Policy.attribution-reporting π | Chrome | 9/12/2023 | Chrome Android | 9/12/2023 | ||
| http.headers.Permissions-Policy.private-state-token-issuance π | Chrome | 9/12/2023 | Chrome Android | 9/12/2023 | ||
| http.headers.Permissions-Policy.private-state-token-redemption π | Chrome | 9/12/2023 | Chrome Android | 9/12/2023 | ||
| http.headers.Sec-Private-State-Token π | Chrome | 9/12/2023 | Chrome Android | 9/12/2023 | ||
| http.headers.Sec-Private-State-Token-Crypto-Version π | Chrome | 9/12/2023 | Chrome Android | 9/12/2023 | ||
| http.headers.Sec-Private-State-Token-Lifetime π | Chrome | 9/12/2023 | Chrome Android | 9/12/2023 | ||
| http.headers.Sec-Redemption-Record π | Chrome | 9/12/2023 | Chrome Android | 9/12/2023 | ||
| http.headers.Supports-Loading-Mode.fenced-frame π | Chrome | 9/12/2023 | Chrome Android | 9/12/2023 | ||
| http.headers.WWW-Authenticate.Digest.SHA-256 | Chrome | 9/12/2023 | Chrome Android | 9/12/2023 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Feature-Policy.browsing-topics | Chrome | 7/18/2023 | Chrome Android | 7/21/2023 | 3 | |
| http.headers.Observe-Browsing-Topics | Chrome | 7/18/2023 | Chrome Android | 7/21/2023 | 3 | |
| http.headers.Permissions-Policy.browsing-topics | Chrome | 7/18/2023 | Chrome Android | 7/21/2023 | 3 | |
| http.headers.Sec-Browsing-Topics | Chrome | 7/18/2023 | Chrome Android | 7/21/2023 | 3 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Set-Cookie.Partitioned π | Chrome | 5/30/2023 | Chrome Android | 5/30/2023 | ||
| http.headers.Feature-Policy.storage-access π | Chrome | 5/2/2023 | Chrome Android | 5/2/2023 | ||
| http.headers.Permissions-Policy.storage-access π | Chrome | 5/2/2023 | Chrome Android | 5/2/2023 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Content-Security-Policy.script-src.inline-speculation-rules | Chrome | 2/7/2023 | Chrome Android | 2/7/2023 | ||
| http.headers.Feature-Policy.identity-credentials-get π | Chrome | 2/7/2023 | Chrome Android | 2/7/2023 | ||
| http.headers.Permissions-Policy.identity-credentials-get π | Chrome | 2/7/2023 | Chrome Android | 2/7/2023 | ||
| http.headers.Sec-Purpose π | Chrome | 2/7/2023 | Chrome Android | 2/7/2023 | ||
| http.headers.Sec-Purpose.speculationrules | Chrome | 2/7/2023 | Chrome Android | 2/7/2023 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Supports-Loading-Mode π | Chrome | 1/10/2023 | Chrome Android | 1/10/2023 | ||
| http.headers.Supports-Loading-Mode.credentialed-prerender π | Chrome | 1/10/2023 | Chrome Android | 1/10/2023 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Feature-Policy.wildcards | Chrome | 11/29/2022 | Chrome Android | 11/29/2022 | ||
| http.headers.Permissions-Policy.wildcards | Chrome | 11/29/2022 | Chrome Android | 11/29/2022 | ||
| http.headers.Sec-CH-Prefers-Reduced-Motion π | Chrome | 11/29/2022 | Chrome Android | 11/29/2022 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Accept-CH.Sec-CH-Viewport-Height π | Chrome | 9/2/2022 | Chrome Android | 9/2/2022 | ||
| http.headers.Feature-Policy.picture-in-picture π | Chrome | 9/4/2018 | Chrome Android | 9/2/2022 | 1459 | |
| http.headers.Permissions-Policy.picture-in-picture π | Chrome | 1/19/2021 | Chrome Android | 9/2/2022 | 591 | |
| http.headers.Sec-CH-Viewport-Height π | Chrome | 9/2/2022 | Chrome Android | 9/2/2022 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Feature-Policy.bluetooth π | Chrome | 8/2/2022 | Chrome Android | 8/2/2022 | ||
| http.headers.Permissions-Policy.bluetooth π | Chrome | 8/2/2022 | Chrome Android | 8/2/2022 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Link π | Chrome | 6/21/2022 | Chrome Android | 6/21/2022 | ||
| http.headers.Link.fetchpriority π | Chrome | 6/21/2022 | Chrome Android | 6/21/2022 | ||
| http.headers.Permissions-Policy.gamepad π | Chrome | 6/21/2022 | Chrome Android | 6/21/2022 | ||
| http.status.103 π | Chrome | 6/21/2022 | Chrome Android | 6/21/2022 | Chrome: Supported in HTTP/2 and later only.Chrome Android: Supported in HTTP/2 and later only.Edge: Supported in HTTP/2 and later only.Quest Browser: Supported in HTTP/2 and later only.Opera: Supported in HTTP/2 and later only.Opera Android: Supported in HTTP/2 and later only.Safari: Supported in HTTP/2 and later only.Safari on iOS: Supported in HTTP/2 and later only.Samsung Internet: Supported in HTTP/2 and later only.WebView Android: Supported in HTTP/2 and later only.WebView on iOS: Supported in HTTP/2 and later only. | |
| http.status.103.preconnect | Chrome | 6/21/2022 | Chrome Android | 6/21/2022 | ||
| http.status.103.preload | Chrome | 6/21/2022 | Chrome Android | 6/21/2022 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Feature-Policy.window-management π | Chrome | 3/29/2022 | Chrome Android | 3/29/2022 | ||
| http.headers.Permissions-Policy.window-management π | Chrome | 3/29/2022 | Chrome Android | 3/29/2022 | ||
| http.headers.Sec-CH-UA-WoW64 π | Chrome | 3/29/2022 | Chrome Android | 3/29/2022 | ||
| http.headers.Range.cors_safe | Chrome | 3/1/2022 | Chrome Android | 3/1/2022 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Sec-CH-UA-Full-Version-List π | Chrome | 2/1/2022 | Chrome Android | 2/1/2022 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Accept-CH.Sec-CH-DPR π | Chrome | 1/4/2022 | Chrome Android | 1/4/2022 | ||
| http.headers.Accept-CH.Sec-CH-Device-Memory π | Chrome | 1/4/2022 | Chrome Android | 1/4/2022 | ||
| http.headers.Accept-CH.Sec-CH-Viewport-Width π | Chrome | 1/4/2022 | Chrome Android | 1/4/2022 | ||
| http.headers.Accept-CH.Sec-CH-Width π | Chrome | 1/4/2022 | Chrome Android | 1/4/2022 | ||
| http.headers.Content-Security-Policy.script-src.wasm-unsafe-eval | Chrome | 1/4/2022 | Chrome Android | 1/4/2022 | ||
| http.headers.Sec-CH-DPR π | Chrome | 1/4/2022 | Chrome Android | 1/4/2022 | ||
| http.headers.Sec-CH-Device-Memory π | Chrome | 1/4/2022 | Chrome Android | 1/4/2022 | Chrome: Before Chrome 147, reported values were 0.25, 0.5, 1, 2, 4, and 8.Chrome: From Chrome 147, reported values are 2, 4, 8, 16, and 32.Chrome: Before Chrome 147, reported values were 0.25, 0.5, 1, 2, 4, and 8.Chrome: From Chrome 147, reported values are 2, 4, 8, 16, and 32.Chrome Android: From Chrome 147, reported values are 1, 2, 4, and 8.Chrome Android: Before Chrome 147, reported values were 0.25, 0.5, 1, 2, 4, and 8.Chrome Android: From Chrome 147, reported values are 1, 2, 4, and 8.Chrome Android: Before Chrome 147, reported values were 0.25, 0.5, 1, 2, 4, and 8.Edge: Before Edge 147, reported values were 0.25, 0.5, 1, 2, 4, and 8.Edge: From Edge 147, reported values are 2, 4, 8, 16, and 32.Edge: Before Edge 147, reported values were 0.25, 0.5, 1, 2, 4, and 8.Edge: From Edge 147, reported values are 2, 4, 8, 16, and 32.Quest Browser: From Chrome 147, reported values are 1, 2, 4, and 8.Quest Browser: Before Chrome 147, reported values were 0.25, 0.5, 1, 2, 4, and 8.Quest Browser: From Chrome 147, reported values are 1, 2, 4, and 8.Quest Browser: Before Chrome 147, reported values were 0.25, 0.5, 1, 2, 4, and 8.Opera: Before Opera false, reported values were 0.25, 0.5, 1, 2, 4, and 8.Opera: From Opera false, reported values are 2, 4, 8, 16, and 32.Opera: Before Opera false, reported values were 0.25, 0.5, 1, 2, 4, and 8.Opera: From Opera false, reported values are 2, 4, 8, 16, and 32.Opera Android: From Chrome 147, reported values are 1, 2, 4, and 8.Opera Android: Before Chrome 147, reported values were 0.25, 0.5, 1, 2, 4, and 8.Opera Android: From Chrome 147, reported values are 1, 2, 4, and 8.Opera Android: Before Chrome 147, reported values were 0.25, 0.5, 1, 2, 4, and 8.Samsung Internet: From Chrome 147, reported values are 1, 2, 4, and 8.Samsung Internet: Before Chrome 147, reported values were 0.25, 0.5, 1, 2, 4, and 8.Samsung Internet: From Chrome 147, reported values are 1, 2, 4, and 8.Samsung Internet: Before Chrome 147, reported values were 0.25, 0.5, 1, 2, 4, and 8.WebView Android: From Chrome 147, reported values are 1, 2, 4, and 8.WebView Android: Before Chrome 147, reported values were 0.25, 0.5, 1, 2, 4, and 8.WebView Android: From Chrome 147, reported values are 1, 2, 4, and 8.WebView Android: Before Chrome 147, reported values were 0.25, 0.5, 1, 2, 4, and 8. | |
| http.headers.Sec-CH-Viewport-Width π | Chrome | 1/4/2022 | Chrome Android | 1/4/2022 | ||
| http.headers.Sec-CH-Width π | Chrome | 1/4/2022 | Chrome Android | 1/4/2022 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Cross-Origin-Embedder-Policy.credentialless π | Chrome | 11/15/2021 | Chrome Android | 11/15/2021 | ||
| http.headers.Cross-Origin-Embedder-Policy.report-to_parameter π | Chrome | 11/15/2021 | Chrome Android | 11/15/2021 | ||
| http.headers.Cross-Origin-Opener-Policy.report-to_parameter π | Chrome | 11/15/2021 | Chrome Android | 11/15/2021 | ||
| http.headers.Reporting-Endpoints π | Chrome | 11/15/2021 | Chrome Android | 11/15/2021 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Feature-Policy.display-capture π | Chrome | 9/21/2021 | Chrome Android | 9/21/2021 | ||
| http.headers.Feature-Policy.idle-detection π | Chrome | 9/21/2021 | Chrome Android | 9/21/2021 | ||
| http.headers.Permissions-Policy.display-capture π | Chrome | 9/21/2021 | Chrome Android | 9/21/2021 | ||
| http.headers.Permissions-Policy.idle-detection π | Chrome | 9/21/2021 | Chrome Android | 9/21/2021 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Feature-Policy.otp-credentials π | Chrome Android | 7/27/2020 | Chrome | 8/31/2021 | 400 | |
| http.headers.Permissions-Policy.otp-credentials π | Chrome Android | 1/19/2021 | Chrome | 8/31/2021 | 224 | |
| http.headers.Sec-CH-Prefers-Color-Scheme π | Chrome | 8/31/2021 | Chrome Android | 8/31/2021 | ||
| http.headers.Sec-CH-UA-Bitness π | Chrome | 8/31/2021 | Chrome Android | 8/31/2021 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.mixed-content.block_mixed_downloads π | Chrome | 7/20/2021 | Chrome Android | 7/20/2021 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Critical-CH π | Chrome | 5/25/2021 | Chrome Android | 5/25/2021 | ||
| http.headers.Set-Cookie.SameSite.schemeful | Chrome | 5/25/2021 | Chrome Android | 5/25/2021 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Origin-Agent-Cluster π | Chrome | 4/13/2021 | Chrome Android | 4/13/2021 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Accept-CH.Sec-CH-UA | Chrome | 3/2/2021 | Chrome Android | 3/2/2021 | ||
| http.headers.Accept-CH.Sec-CH-UA-Arch | Chrome | 3/2/2021 | Chrome Android | 3/2/2021 | ||
| http.headers.Accept-CH.Sec-CH-UA-Full-Version | Chrome | 3/2/2021 | Chrome Android | 3/2/2021 | ||
| http.headers.Accept-CH.Sec-CH-UA-Mobile | Chrome | 3/2/2021 | Chrome Android | 3/2/2021 | ||
| http.headers.Accept-CH.Sec-CH-UA-Model | Chrome | 3/2/2021 | Chrome Android | 3/2/2021 | ||
| http.headers.Accept-CH.Sec-CH-UA-Platform | Chrome | 3/2/2021 | Chrome Android | 3/2/2021 | ||
| http.headers.Accept-CH.Sec-CH-UA-Platform-Version | Chrome | 3/2/2021 | Chrome Android | 3/2/2021 | ||
| http.headers.Feature-Policy.serial π | Chrome | 3/2/2021 | Chrome Android | 3/2/2021 | ||
| http.headers.Permissions-Policy.serial π | Chrome | 3/2/2021 | Chrome Android | 3/2/2021 | ||
| http.headers.Sec-CH-UA π | Chrome | 3/2/2021 | Chrome Android | 3/2/2021 | ||
| http.headers.Sec-CH-UA-Arch π | Chrome | 3/2/2021 | Chrome Android | 3/2/2021 | ||
| http.headers.Sec-CH-UA-Full-Version π | Chrome | 3/2/2021 | Chrome Android | 3/2/2021 | ||
| http.headers.Sec-CH-UA-Mobile π | Chrome | 3/2/2021 | Chrome Android | 3/2/2021 | ||
| http.headers.Sec-CH-UA-Model π | Chrome | 3/2/2021 | Chrome Android | 3/2/2021 | ||
| http.headers.Sec-CH-UA-Platform π | Chrome | 3/2/2021 | Chrome Android | 3/2/2021 | ||
| http.headers.Sec-CH-UA-Platform-Version π | Chrome | 3/2/2021 | Chrome Android | 3/2/2021 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Feature-Policy.cross-origin-isolated π | Chrome | 11/17/2020 | Chrome Android | 11/17/2020 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Feature-Policy.web-share π | Chrome | 10/20/2020 | Chrome Android | 10/20/2020 | ||
| http.mixed-content.auto_upgrade_images π | Chrome | 10/20/2020 | Chrome Android | 10/20/2020 | Firefox: Set security.mixed_content.upgrade_display_content preference to true to allow HTTP fetching and display of upgradable content.Firefox: Set security.mixed_content.block_display_content preference to true to block all mixed content.Firefox for Android: Set security.mixed_content.upgrade_display_content preference to true to allow HTTP fetching and display of upgradable content.Firefox for Android: Set security.mixed_content.block_display_content preference to true to block all mixed content. |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Referrer-Policy.default_strict-origin-when-cross-origin | Chrome | 8/25/2020 | Chrome Android | 8/25/2020 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Feature-Policy.publickey-credentials-create π | Chrome | 7/27/2020 | Chrome Android | 7/27/2020 | ||
| http.headers.Feature-Policy.publickey-credentials-get π | Chrome | 7/27/2020 | Chrome Android | 7/27/2020 | ||
| http.headers.Feature-Policy.screen-wake-lock π | Chrome | 7/27/2020 | Chrome Android | 7/27/2020 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Content-Security-Policy.require-trusted-types-for π | Chrome | 5/19/2020 | Chrome Android | 5/19/2020 | ||
| http.headers.Content-Security-Policy.trusted-types π | Chrome | 5/19/2020 | Chrome Android | 5/19/2020 | ||
| http.headers.Cross-Origin-Embedder-Policy π | Chrome | 5/19/2020 | Chrome Android | 5/19/2020 | ||
| http.headers.Cross-Origin-Opener-Policy π | Chrome | 5/19/2020 | Chrome Android | 5/19/2020 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Sec-Fetch-Dest π | Chrome | 2/4/2020 | Chrome Android | 2/4/2020 | ||
| http.headers.Set-Cookie.SameSite.Lax_default | Chrome | 2/4/2020 | Chrome Android | 2/4/2020 | ||
| http.headers.Set-Cookie.SameSite.none_requires_secure | Chrome | 2/4/2020 | Chrome Android | 2/4/2020 | ||
| http.mixed-content.auto_upgrade_video_audio π | Chrome | 2/4/2020 | Chrome Android | 2/4/2020 | Firefox: Set security.mixed_content.upgrade_display_content preference to true to allow HTTP fetching and display of upgradable content.Firefox: Set security.mixed_content.block_display_content preference to true to block all mixed content.Firefox for Android: Set security.mixed_content.upgrade_display_content preference to true to allow HTTP fetching and display of upgradable content.Firefox for Android: Set security.mixed_content.block_display_content preference to true to block all mixed content. |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Feature-Policy.xr-spatial-tracking π | Chrome | 12/10/2019 | Chrome Android | 12/17/2019 | 7 | |
| http.mixed-content π | Chrome | 12/10/2019 | Chrome Android | 12/17/2019 | 7 | |
| http.mixed-content.allow_file_urls π | Chrome | 12/10/2019 | Chrome Android | 12/17/2019 | 7 | |
| http.mixed-content.allow_localhost_url π | Chrome | 12/10/2019 | Chrome Android | 12/17/2019 | 7 | |
| http.mixed-content.allow_loopback_url π | Chrome | 12/10/2019 | Chrome Android | 12/17/2019 | 7 | |
| http.mixed-content.blockable_mixed_content π | Chrome | 12/10/2019 | Chrome Android | 12/17/2019 | 7 | Chrome: From version 79 blocks iframes, scripts, and stylesheets.Chrome Android: From version 79 blocks iframes, scripts, and stylesheets.Edge: From version 79 blocks iframes, scripts, and stylesheets.Quest Browser: From version 8.0 blocks iframes, scripts, and stylesheets.Opera: From version 66 blocks iframes, scripts, and stylesheets.Opera Android: From version 57 blocks iframes, scripts, and stylesheets.Samsung Internet: From version 12.0 blocks iframes, scripts, and stylesheets.WebView Android: From version 79 blocks iframes, scripts, and stylesheets. |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Referer.length_limit_4096B | Chrome | 9/10/2019 | Chrome Android | 9/10/2019 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Content-Length.cors_response_safelist | Chrome | 7/30/2019 | Chrome Android | 7/30/2019 | ||
| http.headers.Sec-Fetch-Mode π | Chrome | 7/30/2019 | Chrome Android | 7/30/2019 | ||
| http.headers.Sec-Fetch-Site π | Chrome | 7/30/2019 | Chrome Android | 7/30/2019 | ||
| http.headers.Sec-Fetch-User π | Chrome | 7/30/2019 | Chrome Android | 7/30/2019 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Cache-Control.stale-while-revalidate π | Chrome | 6/4/2019 | Chrome Android | 6/4/2019 | ||
| http.headers.Content-Security-Policy.script-src-attr π | Chrome | 6/4/2019 | Chrome Android | 6/4/2019 | ||
| http.headers.Content-Security-Policy.script-src-elem π | Chrome | 6/4/2019 | Chrome Android | 6/4/2019 | ||
| http.headers.Content-Security-Policy.style-src-attr π | Chrome | 6/4/2019 | Chrome Android | 6/4/2019 | ||
| http.headers.Content-Security-Policy.style-src-elem π | Chrome | 6/4/2019 | Chrome Android | 6/4/2019 | Safari: The style-src-elem directive was parsed, but had no effect. See bug 276931.Safari on iOS: The style-src-elem directive was parsed, but had no effect. See bug 276931.WebView on iOS: The style-src-elem directive was parsed, but had no effect. See bug 276931. |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Cross-Origin-Resource-Policy π | Chrome | 3/12/2019 | Chrome Android | 3/12/2019 | Chrome: Until version 75, downloads for files with this header would fail in Chrome. See bug 41452948.Chrome: From version 80 to 85, linearized PDFs served inline with this header fail to render properly. See bug 40127935. From version 86, partial PDF loading is disabled.Chrome Android: Until version 75, downloads for files with this header would fail in Chrome Android. See bug 41452948.Chrome Android: From version 80 to 85, linearized PDFs served inline with this header fail to render properly. See bug 40127935. From version 86, partial PDF loading is disabled.Quest Browser: Until version 7.0, downloads for files with this header would fail in Quest Browser. See bug 41452948.Quest Browser: From version 9.0 to 85, linearized PDFs served inline with this header fail to render properly. See bug 40127935. From version 12.0, partial PDF loading is disabled.Opera: Until version 62, downloads for files with this header would fail in Opera. See bug 41452948.Opera: From version 67 to 85, linearized PDFs served inline with this header fail to render properly. See bug 40127935. From version 72, partial PDF loading is disabled.Opera Android: Until version 54, downloads for files with this header would fail in Opera Android. See bug 41452948.Opera Android: From version 57 to 85, linearized PDFs served inline with this header fail to render properly. See bug 40127935. From version 61, partial PDF loading is disabled.WebView Android: Until version 75, downloads for files with this header would fail in WebView Android. See bug 41452948.WebView Android: From version 80 to 85, linearized PDFs served inline with this header fail to render properly. See bug 40127935. From version 86, partial PDF loading is disabled. |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.NEL π | Chrome | 12/4/2018 | Chrome Android | 12/4/2018 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Content-Security-Policy.report-to π | Chrome | 10/16/2018 | Chrome Android | 10/17/2018 | 1 | |
| http.headers.Report-To | Chrome | 10/16/2018 | Chrome Android | 10/17/2018 | 1 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Content-Security-Policy.unsafe-hashes | Chrome | 9/4/2018 | Chrome Android | 9/4/2018 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Downlink π | Chrome | 5/29/2018 | Chrome Android | 5/31/2018 | 2 | Chrome: The value is never greater than 10 Mbps, as a non-standard anti-fingerprinting measure.Chrome Android: The value is never greater than 10 Mbps, as a non-standard anti-fingerprinting measure.Edge: The value is never greater than 10 Mbps, as a non-standard anti-fingerprinting measure.Quest Browser: The value is never greater than 10 Mbps, as a non-standard anti-fingerprinting measure.Opera: The value is never greater than 10 Mbps, as a non-standard anti-fingerprinting measure.Opera Android: The value is never greater than 10 Mbps, as a non-standard anti-fingerprinting measure.Samsung Internet: The value is never greater than 10 Mbps, as a non-standard anti-fingerprinting measure.WebView Android: The value is never greater than 10 Mbps, as a non-standard anti-fingerprinting measure. |
| http.headers.ECT π | Chrome | 5/29/2018 | Chrome Android | 5/31/2018 | 2 | |
| http.headers.RTT π | Chrome | 5/29/2018 | Chrome Android | 5/31/2018 | 2 | Chrome: The value is never greater than 3000 ms, as a non-standard anti-fingerprinting measure.Chrome Android: The value is never greater than 3000 ms, as a non-standard anti-fingerprinting measure.Edge: The value is never greater than 3000 ms, as a non-standard anti-fingerprinting measure.Quest Browser: The value is never greater than 3000 ms, as a non-standard anti-fingerprinting measure.Opera: The value is never greater than 3000 ms, as a non-standard anti-fingerprinting measure.Opera Android: The value is never greater than 3000 ms, as a non-standard anti-fingerprinting measure.Samsung Internet: The value is never greater than 3000 ms, as a non-standard anti-fingerprinting measure.WebView Android: The value is never greater than 3000 ms, as a non-standard anti-fingerprinting measure. |
| http.headers.Set-Cookie.SameSite.None | Chrome | 5/29/2018 | Chrome Android | 5/31/2018 | 2 | Chrome: Rejects cookies with SameSite=None. See SameSite=None: Known Incompatible Clients.Chrome Android: Rejects cookies with SameSite=None. See SameSite=None: Known Incompatible Clients.Quest Browser: Rejects cookies with SameSite=None. See SameSite=None: Known Incompatible Clients.Opera: Rejects cookies with SameSite=None. See SameSite=None: Known Incompatible Clients.Opera Android: Rejects cookies with SameSite=None. See SameSite=None: Known Incompatible Clients.Safari: Not supported before macOS version 10.15 (Catalina).Samsung Internet: Rejects cookies with SameSite=None. See SameSite=None: Known Incompatible Clients.WebView Android: Rejects cookies with SameSite=None. See SameSite=None: Known Incompatible Clients. |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Feature-Policy.accelerometer π | Chrome | 4/17/2018 | Chrome Android | 4/17/2018 | ||
| http.headers.Feature-Policy.ambient-light-sensor π | Chrome | 4/17/2018 | Chrome Android | 4/17/2018 | ||
| http.headers.Feature-Policy.gyroscope π | Chrome | 4/17/2018 | Chrome Android | 4/17/2018 | ||
| http.headers.Feature-Policy.magnetometer π | Chrome | 4/17/2018 | Chrome Android | 4/17/2018 | ||
| http.headers.Permissions-Policy.ambient-light-sensor π | Chrome | 4/17/2018 | Chrome Android | 4/17/2018 | ||
| http.headers.Permissions-Policy.magnetometer π | Chrome | 4/17/2018 | Chrome Android | 4/17/2018 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Access-Control-Expose-Headers.wildcard | Chrome | 3/6/2018 | Chrome Android | 3/6/2018 | ||
| http.headers.Clear-Site-Data.cache π | Chrome | 3/6/2018 | Chrome Android | 3/6/2018 | Chrome: Setting this value may increase response duration (see bug 40233601.Chrome: Setting this value may prevent a page from fully load (see bug 41343050.Chrome Android: Setting this value may increase response duration (see bug 40233601.Chrome Android: Setting this value may prevent a page from fully load (see bug 41343050.Edge: Setting this value may increase response duration (see bug 40233601.Quest Browser: Setting this value may increase response duration (see bug 40233601.Opera: Setting this value may increase response duration (see bug 40233601.Opera: Setting this value may prevent a page from fully load (see bug 41343050.Opera Android: Setting this value may increase response duration (see bug 40233601.Opera Android: Setting this value may prevent a page from fully load (see bug 41343050.Samsung Internet: Setting this value may increase response duration (see bug 40233601.WebView Android: Setting this value may increase response duration (see bug 40233601.WebView Android: Setting this value may prevent a page from fully load (see bug 41343050. | |
| http.headers.Server-Timing π | Chrome | 3/6/2018 | Chrome Android | 3/6/2018 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Feature-Policy.autoplay π | Chrome | 1/23/2018 | Chrome Android | 1/23/2018 | ||
| http.headers.Feature-Policy.camera π | Chrome | 1/23/2018 | Chrome Android | 1/23/2018 | ||
| http.headers.Feature-Policy.encrypted-media π | Chrome | 1/23/2018 | Chrome Android | 1/23/2018 | ||
| http.headers.Feature-Policy.geolocation π | Chrome | 1/23/2018 | Chrome Android | 1/23/2018 | ||
| http.headers.Feature-Policy.microphone π | Chrome | 1/23/2018 | Chrome Android | 1/23/2018 | ||
| http.headers.Feature-Policy.midi π | Chrome | 1/23/2018 | Chrome Android | 1/23/2018 | ||
| http.headers.X-Content-Type-Options π | Chrome | 1/23/2018 | Chrome Android | 1/23/2018 | Chrome: Not supported for stylesheets.Chrome Android: Not supported for stylesheets.Opera: Not supported for stylesheets.Opera Android: Not supported for stylesheets.Samsung Internet: Not supported for stylesheets.WebView Android: Not supported for stylesheets. |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Access-Control-Allow-Headers.wildcard | Chrome Android | 12/5/2017 | Chrome | 12/6/2017 | 1 | |
| http.headers.Access-Control-Allow-Methods.wildcard | Chrome Android | 12/5/2017 | Chrome | 12/6/2017 | 1 | |
| http.headers.Content-Security-Policy.form-action.blocks_redirects | Chrome Android | 12/5/2017 | Chrome | 12/6/2017 | 1 | |
| http.headers.Snapshot-Content-Location | Chrome Android | 12/5/2017 | Chrome | 12/6/2017 | 1 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Feature-Policy.fullscreen π | Chrome | 10/17/2017 | Chrome Android | 10/24/2017 | 7 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Accept-CH.Device-Memory | Chrome | 9/5/2017 | Chrome Android | 9/5/2017 | ||
| http.headers.Clear-Site-Data π | Chrome | 9/5/2017 | Chrome Android | 9/5/2017 | ||
| http.headers.Clear-Site-Data.cookies π | Chrome | 9/5/2017 | Chrome Android | 9/5/2017 | ||
| http.headers.Clear-Site-Data.secure_context_required | Chrome | 9/5/2017 | Chrome Android | 9/5/2017 | ||
| http.headers.Clear-Site-Data.storage π | Chrome | 9/5/2017 | Chrome Android | 9/5/2017 | ||
| http.headers.Device-Memory | Chrome | 9/5/2017 | Chrome Android | 9/5/2017 | Chrome: From Chrome 147, reported values are 2, 4, 8, 16, and 32.Chrome: Before Chrome 147, reported values were 0.25, 0.5, 1, 2, 4, and 8.Chrome Android: From Chrome 147, reported values are 1, 2, 4, and 8.Chrome Android: Before Chrome 147, reported values were 0.25, 0.5, 1, 2, 4, and 8.Edge: From Edge 147, reported values are 2, 4, 8, 16, and 32.Edge: Before Edge 147, reported values were 0.25, 0.5, 1, 2, 4, and 8.Quest Browser: From Chrome 147, reported values are 1, 2, 4, and 8.Quest Browser: Before Chrome 147, reported values were 0.25, 0.5, 1, 2, 4, and 8.Opera: From Opera false, reported values are 2, 4, 8, 16, and 32.Opera: Before Opera false, reported values were 0.25, 0.5, 1, 2, 4, and 8.Opera Android: From Chrome 147, reported values are 1, 2, 4, and 8.Opera Android: Before Chrome 147, reported values were 0.25, 0.5, 1, 2, 4, and 8.Samsung Internet: From Chrome 147, reported values are 1, 2, 4, and 8.Samsung Internet: Before Chrome 147, reported values were 0.25, 0.5, 1, 2, 4, and 8.WebView Android: From Chrome 147, reported values are 1, 2, 4, and 8.WebView Android: Before Chrome 147, reported values were 0.25, 0.5, 1, 2, 4, and 8. | |
| http.headers.Referrer-Policy.same-origin | Chrome | 9/5/2017 | Chrome Android | 9/5/2017 | ||
| http.headers.Referrer-Policy.strict-origin | Chrome | 9/5/2017 | Chrome Android | 9/5/2017 | ||
| http.headers.Referrer-Policy.strict-origin-when-cross-origin | Chrome | 9/5/2017 | Chrome Android | 9/5/2017 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.data-url.top_level_navigation_blocked | Chrome | 7/25/2017 | Chrome Android | 8/1/2017 | 7 | |
| http.headers.Feature-Policy | Chrome | 7/25/2017 | Chrome Android | 8/1/2017 | 7 | |
| http.headers.Feature-Policy.payment π | Chrome | 7/25/2017 | Chrome Android | 8/1/2017 | 7 | |
| http.headers.Feature-Policy.usb π | Chrome | 7/25/2017 | Chrome Android | 8/1/2017 | 7 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Content-Security-Policy.report-sample | Chrome | 6/5/2017 | Chrome Android | 6/6/2017 | 1 | |
| http.headers.Content-Security-Policy.script-src.external_scripts π | Chrome | 6/5/2017 | Chrome Android | 6/6/2017 | 1 | |
| http.headers.Content-Security-Policy.worker-src π | Chrome | 6/5/2017 | Chrome Android | 6/6/2017 | 1 | Chrome: Chrome 59 and higher skips the deprecated child-src directive.Chrome Android: Chrome Android 59 and higher skips the deprecated child-src directive.Quest Browser: Quest Browser 5.0 and higher skips the deprecated child-src directive.Opera: Opera 46 and higher skips the deprecated child-src directive.Opera Android: Opera Android 43 and higher skips the deprecated child-src directive.WebView Android: WebView Android 59 and higher skips the deprecated child-src directive. |
| http.headers.Service-Worker-Navigation-Preload π | Chrome | 6/5/2017 | Chrome Android | 6/6/2017 | 1 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Content-Security-Policy.worker_support | Chrome | 1/25/2017 | Chrome Android | 2/1/2017 | 7 | |
| http.headers.Referrer-Policy π | Chrome | 1/25/2017 | Chrome Android | 2/1/2017 | 7 | |
| http.headers.Referrer-Policy.no-referrer-when-downgrade | Chrome | 1/25/2017 | Chrome Android | 2/1/2017 | 7 | |
| http.headers.Referrer-Policy.origin-when-cross-origin | Chrome | 1/25/2017 | Chrome Android | 2/1/2017 | 7 | |
| http.headers.Referrer-Policy.unsafe-url | Chrome | 1/25/2017 | Chrome Android | 2/1/2017 | 7 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Timing-Allow-Origin π | Chrome | 10/12/2016 | Chrome Android | 10/19/2016 | 7 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Alt-Svc π | Chrome | 7/20/2016 | Chrome Android | 7/27/2016 | 7 | Firefox: Only supports draft-04Firefox for Android: Only supports draft-04 |
| http.headers.Content-Security-Policy.strict-dynamic | Chrome | 7/20/2016 | Chrome Android | 7/27/2016 | 7 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Accept-Encoding.br π | Chrome | 4/13/2016 | Chrome Android | 6/8/2016 | 56 | Safari: Unsupported before macOS 10.13 High Sierra. |
| http.headers.Content-Encoding.br π | Chrome | 4/13/2016 | Chrome Android | 6/8/2016 | 56 | Safari: Unsupported before macOS 10.13 High Sierra. |
| http.headers.Set-Cookie.SameSite π | Chrome | 5/25/2016 | Chrome Android | 6/8/2016 | 14 | Safari: Safari 13 on macOS 10.14 (Mojave), treats SameSite=None and invalid values as Strict. This is fixed in version 10.15 (Catalina) and later.Safari: Treats SameSite=None and invalid values as Strict in macOS before 10.15 Catalina. See bug 198181.Safari on iOS: Treats SameSite=None and invalid values as Strict in iOS before 13. See bug 198181.WebView on iOS: Treats SameSite=None and invalid values as Strict in iOS before 13. See bug 198181. |
| http.headers.Set-Cookie.SameSite.Lax | Chrome | 5/25/2016 | Chrome Android | 6/8/2016 | 14 | |
| http.headers.Set-Cookie.SameSite.Strict | Chrome | 5/25/2016 | Chrome Android | 6/8/2016 | 14 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Save-Data π | Chrome | 3/2/2016 | Chrome Android | 3/9/2016 | 7 | |
| http.headers.Set-Cookie.host_secure_prefixes | Chrome | 3/2/2016 | Chrome Android | 3/9/2016 | 7 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Accept-CH π | Chrome | 10/13/2015 | Chrome Android | 10/14/2015 | 1 | |
| http.headers.Accept-CH.Content-DPR | Chrome | 10/13/2015 | Chrome Android | 10/14/2015 | 1 | |
| http.headers.Accept-CH.DPR | Chrome | 10/13/2015 | Chrome Android | 10/14/2015 | 1 | |
| http.headers.Accept-CH.Viewport-Width | Chrome | 10/13/2015 | Chrome Android | 10/14/2015 | 1 | |
| http.headers.Accept-CH.Width | Chrome | 10/13/2015 | Chrome Android | 10/14/2015 | 1 | |
| http.headers.Content-DPR | Chrome | 10/13/2015 | Chrome Android | 10/14/2015 | 1 | |
| http.headers.DPR | Chrome | 10/13/2015 | Chrome Android | 10/14/2015 | 1 | |
| http.headers.Viewport-Width | Chrome | 10/13/2015 | Chrome Android | 10/14/2015 | 1 | |
| http.headers.Width | Chrome | 10/13/2015 | Chrome Android | 10/14/2015 | 1 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Content-Security-Policy.block-all-mixed-content | Chrome | 7/21/2015 | Chrome Android | 7/29/2015 | 8 | Chrome: Will be removed, see bug 40260100.Chrome Android: Will be removed, see bug 40260100.Edge: Will be removed, see bug 40260100.Quest Browser: Will be removed, see bug 40260100.Opera: Will be removed, see bug 40260100.Opera Android: Will be removed, see bug 40260100.Samsung Internet: Will be removed, see bug 40260100.WebView Android: Will be removed, see bug 40260100. |
| http.headers.Upgrade-Insecure-Requests π | Chrome | 7/21/2015 | Chrome Android | 7/29/2015 | 8 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Content-Security-Policy.upgrade-insecure-requests π | Chrome | 5/19/2015 | Chrome Android | 5/27/2015 | 8 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Service-Worker-Allowed π | Chrome | 4/14/2015 | Chrome Android | 4/15/2015 | 1 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Content-Security-Policy.base-uri π | Chrome | 1/21/2015 | Chrome Android | 1/21/2015 | ||
| http.headers.Content-Security-Policy.child-src π | Chrome | 1/21/2015 | Chrome Android | 1/21/2015 | ||
| http.headers.Content-Security-Policy.form-action π | Chrome | 1/21/2015 | Chrome Android | 1/21/2015 | ||
| http.headers.Content-Security-Policy.frame-ancestors π | Chrome | 1/21/2015 | Chrome Android | 1/21/2015 | Firefox: Before Firefox 58, frame-ancestors is ignored in Content-Security-Policy-Report-Only.Firefox for Android: Before Firefox for Android 58, frame-ancestors is ignored in Content-Security-Policy-Report-Only. | |
| http.headers.Content-Security-Policy.manifest-src π | Chrome | 1/21/2015 | Chrome Android | 1/21/2015 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Service-Worker π | Chrome | 10/7/2014 | Chrome Android | 10/8/2014 | 1 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.status.308 π | Chrome | 7/16/2014 | Chrome Android | 7/16/2014 | Internet Explorer: Does not work below Windows 10. |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.headers.Content-Security-Policy π | Chrome | 2/21/2013 | Chrome Android | 2/27/2013 | 6 | Internet Explorer: Only supporting 'sandbox' directive. |
| http.headers.Content-Security-Policy.connect-src π | Chrome | 2/21/2013 | Chrome Android | 2/27/2013 | 6 | Firefox: Before Firefox 50, ping attributes of <a> elements weren't covered by connect-src. |
| http.headers.Content-Security-Policy.default-src π | Chrome | 2/21/2013 | Chrome Android | 2/27/2013 | 6 | |
| http.headers.Content-Security-Policy.font-src π | Chrome | 2/21/2013 | Chrome Android | 2/27/2013 | 6 | |
| http.headers.Content-Security-Policy.frame-src π | Chrome | 2/21/2013 | Chrome Android | 2/27/2013 | 6 | |
| http.headers.Content-Security-Policy.img-src π | Chrome | 2/21/2013 | Chrome Android | 2/27/2013 | 6 | |
| http.headers.Content-Security-Policy.media-src π | Chrome | 2/21/2013 | Chrome Android | 2/27/2013 | 6 | |
| http.headers.Content-Security-Policy.meta-element-support | Chrome | 2/21/2013 | Chrome Android | 2/27/2013 | 6 | |
| http.headers.Content-Security-Policy.object-src π | Chrome | 2/21/2013 | Chrome Android | 2/27/2013 | 6 | |
| http.headers.Content-Security-Policy.report-uri π | Chrome | 2/21/2013 | Chrome Android | 2/27/2013 | 6 | |
| http.headers.Content-Security-Policy.sandbox π | Chrome | 2/21/2013 | Chrome Android | 2/27/2013 | 6 | |
| http.headers.Content-Security-Policy.script-src π | Chrome | 2/21/2013 | Chrome Android | 2/27/2013 | 6 | |
| http.headers.Content-Security-Policy.style-src π | Chrome | 2/21/2013 | Chrome Android | 2/27/2013 | 6 | |
| http.headers.Content-Security-Policy-Report-Only π | Chrome | 2/21/2013 | Chrome Android | 2/27/2013 | 6 | |
| http.headers.DNT | Chrome | 11/6/2012 | Chrome Android | 2/27/2013 | 113 | |
| http.headers.Retry-After π | Chrome | 1/10/2013 | Chrome Android | 2/27/2013 | 48 |
| API | First Browser | Date | Last Browser | Date | Days | Notes |
|---|---|---|---|---|---|---|
| http.data-url π | Chrome | 1/25/2010 | Chrome Android | 6/27/2012 | 884 | Edge: Before Edge 79, the maximum size supported is 4GB.Internet Explorer: Since Internet Explorer 9, the maximum size supported is 4GB.Internet Explorer: In Internet Explorer 8, the maximum size supported is 32kB. |
| http.data-url.css_files | Chrome | 1/25/2010 | Chrome Android | 6/27/2012 | 884 | |
| http.data-url.html_files | Chrome | 1/25/2010 | Chrome Android | 6/27/2012 | 884 | |
| http.data-url.js_files | Chrome | 1/25/2010 | Chrome Android | 6/27/2012 | 884 | |
| http.headers.Accept π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | Firefox: In Firefox 66, the default Accept header value changed to */*.Firefox for Android: In Firefox for Android 66, the default Accept header value changed to */*. |
| http.headers.Accept-Encoding π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Accept-Language π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Accept-Ranges π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Access-Control-Allow-Credentials π | Chrome | 1/25/2010 | Chrome Android | 6/27/2012 | 884 | |
| http.headers.Access-Control-Allow-Headers π | Chrome | 1/25/2010 | Chrome Android | 6/27/2012 | 884 | |
| http.headers.Access-Control-Allow-Methods π | Chrome | 1/25/2010 | Chrome Android | 6/27/2012 | 884 | |
| http.headers.Access-Control-Allow-Origin π | Chrome | 1/25/2010 | Chrome Android | 6/27/2012 | 884 | |
| http.headers.Access-Control-Expose-Headers π | Chrome | 1/25/2010 | Chrome Android | 6/27/2012 | 884 | |
| http.headers.Access-Control-Max-Age π | Chrome | 1/25/2010 | Chrome Android | 6/27/2012 | 884 | |
| http.headers.Access-Control-Request-Headers π | Chrome | 1/25/2010 | Chrome Android | 6/27/2012 | 884 | |
| http.headers.Access-Control-Request-Method π | Chrome | 1/25/2010 | Chrome Android | 6/27/2012 | 884 | |
| http.headers.Age π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Authorization π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Authorization.Basic π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Authorization.Digest π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Authorization.Digest.md5 | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Authorization.NTLM | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Authorization.Negotiate π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Cache-Control π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Connection π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Content-Disposition π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | Chrome: When saving documents, the document title is used instead of the filename parameter if the disposition type is inline. See bug 352093465.Chrome Android: When saving documents, the document title is used instead of the filename parameter if the disposition type is inline. See bug 352093465.Firefox: From version 82, if an <a> element's download attribute is set (for a same-origin URL) then the inline directive is ignored. Earlier versions did not match the specification and respected the header directive over the attribute. See bug 1658877.Firefox for Android: From version 82, if an <a> element's download attribute is set (for a same-origin URL) then the inline directive is ignored. Earlier versions did not match the specification and respected the header directive over the attribute. See bug 1658877.Quest Browser: When saving documents, the document title is used instead of the filename parameter if the disposition type is inline. See bug 352093465.Opera: When saving documents, the document title is used instead of the filename parameter if the disposition type is inline. See bug 352093465.Opera Android: When saving documents, the document title is used instead of the filename parameter if the disposition type is inline. See bug 352093465.Safari: When saving documents, the document title is used instead of the filename parameter if the disposition type is inline. See bug 18384.Safari on iOS: When saving documents, the document title is used instead of the filename parameter if the disposition type is inline. See bug 18384.Samsung Internet: When saving documents, the document title is used instead of the filename parameter if the disposition type is inline. See bug 352093465.WebView Android: When saving documents, the document title is used instead of the filename parameter if the disposition type is inline. See bug 352093465.WebView on iOS: When saving documents, the document title is used instead of the filename parameter if the disposition type is inline. See bug 18384. |
| http.headers.Content-Encoding π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Content-Language π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Content-Length π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Content-Location π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Content-Range π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Content-Type π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Cookie π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | Safari: Cookies with Secure flag are not sent to unsecured http://localhost/ endpoints. See bug 281149.Safari on iOS: Cookies with Secure flag are not sent to unsecured http://localhost/ endpoints. See bug 281149.WebView on iOS: Cookies with Secure flag are not sent to unsecured http://localhost/ endpoints. See bug 281149. |
| http.headers.Date π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.ETag π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Expires π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.From π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Host π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.If-Match π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.If-Modified-Since π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.If-None-Match π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.If-Range π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.If-Unmodified-Since π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Keep-Alive π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Last-Modified π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Location π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Origin π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | Edge: Not sent with POST requestsFirefox: Not sent with POST requests, see bug 446344.Firefox for Android: Not sent with POST requests, see bug 446344. |
| http.headers.Pragma π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Proxy-Authenticate π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Range π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Referer π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Refresh π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | Firefox: From version 136 the HTTP Referer header is sent following a refresh that redirects to another page (if permitted)Firefox for Android: From version 136 the HTTP Referer header is sent following a refresh that redirects to another page (if permitted) |
| http.headers.Sec-WebSocket-Accept π | Chrome | 12/13/2011 | Chrome Android | 6/27/2012 | 197 | |
| http.headers.Sec-WebSocket-Extensions π | Chrome | 12/13/2011 | Chrome Android | 6/27/2012 | 197 | |
| http.headers.Sec-WebSocket-Key π | Chrome | 12/13/2011 | Chrome Android | 6/27/2012 | 197 | |
| http.headers.Sec-WebSocket-Protocol π | Chrome | 12/13/2011 | Chrome Android | 6/27/2012 | 197 | |
| http.headers.Sec-WebSocket-Version π | Chrome | 12/13/2011 | Chrome Android | 6/27/2012 | 197 | |
| http.headers.Server π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Set-Cookie π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | Safari: Cookies with Secure flag are not sent to unsecured http://localhost/ endpoints. See bug 281149.Safari on iOS: Cookies with Secure flag are not sent to unsecured http://localhost/ endpoints. See bug 281149.WebView on iOS: Cookies with Secure flag are not sent to unsecured http://localhost/ endpoints. See bug 281149. |
| http.headers.Set-Cookie.HttpOnly | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Set-Cookie.Max-Age | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.SourceMap π | Chrome | 3/28/2012 | Chrome Android | 6/27/2012 | 91 | Chrome: Not supported for ECMAScript Modules ( <script type="module">). See bug 40854862.Chrome Android: Not supported for ECMAScript Modules (<script type="module">). See bug 40854862.Edge: Not supported for ECMAScript Modules (<script type="module">). See bug 40854862.Quest Browser: Not supported for ECMAScript Modules (<script type="module">). See bug 40854862.Opera: Not supported for ECMAScript Modules (<script type="module">). See bug 40854862.Opera Android: Not supported for ECMAScript Modules (<script type="module">). See bug 40854862.Samsung Internet: Not supported for ECMAScript Modules (<script type="module">). See bug 40854862.WebView Android: Not supported for ECMAScript Modules (<script type="module">). See bug 40854862. |
| http.headers.Strict-Transport-Security π | Chrome | 1/25/2010 | Chrome Android | 6/27/2012 | 884 | |
| http.headers.TE π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Transfer-Encoding π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Upgrade π | Chrome | 5/25/2010 | Chrome Android | 6/27/2012 | 764 | |
| http.headers.User-Agent π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Vary π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Via π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.WWW-Authenticate π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.WWW-Authenticate.Basic π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.WWW-Authenticate.Digest π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.WWW-Authenticate.Digest.md5 | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.WWW-Authenticate.NTLM | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.WWW-Authenticate.Negotiate π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.Warning π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.X-DNS-Prefetch-Control | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.headers.X-Frame-Options π | Chrome | 1/25/2010 | Chrome Android | 6/27/2012 | 884 | |
| http.headers.X-Frame-Options.SAMEORIGIN | Chrome | 1/25/2010 | Chrome Android | 6/27/2012 | 884 | Chrome: Starting in Chrome 61, this applies to all of a frame's ancestors.Chrome Android: Starting in Chrome Android 61, this applies to all of a frame's ancestors.Firefox: Starting in Firefox 59, this applies to all of a frame's ancestors.Firefox for Android: Starting in Firefox for Android 59, this applies to all of a frame's ancestors.Quest Browser: Starting in Quest Browser 5.0, this applies to all of a frame's ancestors.Opera: Starting in Opera 48, this applies to all of a frame's ancestors.Opera Android: Starting in Opera Android 45, this applies to all of a frame's ancestors.Samsung Internet: Starting in Samsung Internet 8.0, this applies to all of a frame's ancestors.WebView Android: Starting in WebView Android 61, this applies to all of a frame's ancestors. |
| http.methods.CONNECT π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.methods.DELETE π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.methods.GET π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.methods.HEAD π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.methods.OPTIONS π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.methods.POST π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 | |
| http.methods.PUT π | Chrome | 12/11/2008 | Chrome Android | 6/27/2012 | 1294 |