HTTP 400 Bad Request 响应状态码表示由于语法无效，服务器无法理解该请求。 客户端不应该在未经修改的情况下重复此请求。
状态
400 Bad Request
规范
| Specification | Title |
|---|---|
| RFC 7231, section 6.5.1: 400 Bad Request | Hypertext Transfer Protocol (HTTP/1.1): Semantics and Content |
400 Bad Request
相关主题
- HTTP
- Guides:
- HTTP access control (CORS)
- HTTP authentication
- HTTP caching
- HTTP compression
- HTTP conditional requests
- HTTP content negotiation
- HTTP cookies
- HTTP range requests
- HTTP redirects
- HTTP specifications
- Feature policy
- References:
-
HTTP headers
AcceptAccept-CharsetAccept-EncodingAccept-LanguageAccept-RangesAccess-Control-Allow-CredentialsAccess-Control-Allow-HeadersAccess-Control-Allow-MethodsAccess-Control-Allow-OriginAccess-Control-Expose-HeadersAccess-Control-Max-AgeAccess-Control-Request-HeadersAccess-Control-Request-MethodAgeAllowAlt-SvcAuthorizationCache-ControlClear-Site-DataConnectionContent-DispositionContent-EncodingContent-LanguageContent-LengthContent-LocationContent-RangeContent-Security-PolicyContent-Security-Policy-Report-OnlyContent-TypeCookieCookie2DNTDateETagEarly-DataExpectExpect-CTExpiresFeature-Policy[我来译!]ForwardedFromHostIf-MatchIf-Modified-SinceIf-None-MatchIf-RangeIf-Unmodified-SinceIndex[我来译!]Keep-AliveLarge-AllocationLast-ModifiedLocationOriginPragmaProxy-AuthenticateProxy-AuthorizationPublic-Key-PinsPublic-Key-Pins-Report-OnlyRangeRefererReferrer-PolicyRetry-AfterSec-WebSocket-AcceptServerServer-Timing[我来译!]Set-CookieSet-Cookie2SourceMapHTTP Strict Transport SecurityTETiming-Allow-OriginTkTrailerTransfer-EncodingUpgrade-Insecure-Requests用户代理VaryViaWWW-AuthenticateWarningX-Content-Type-OptionsDNS 预读取X-Forwarded-ForX-Forwarded-HostX-Forwarded-ProtoX-Frame-Options 响应头X-XSS-Protection
-
HTTP response status codes
100 Continue101 Switching Protocol200 OK201 Created202 Accepted203 Non-Authoritative Information204 No Content205 Reset Content206 Partial Content300 Multiple Choices301 Moved Permanently302 Found303 See Other304 Not Modified307 Temporary Redirect308 Permanent Redirect400 Bad Request401 Unauthorized403 Forbidden404 Not Found405 Method Not Allowed406 Not Acceptable407 Proxy Authentication Required408 Request Timeout409 Conflict410 Gone411 Length Required412 Precondition Failed（先决条件失败）413 Payload Too Large414 URI Too Long415 Unsupported Media Type416 Range Not Satisfiable417 Expectation Failed418 I'm a teapot422 Unprocessable Entity425 Too Early426 Upgrade Required428 Precondition Required429 Too Many Requests431 Request Header Fields Too Large451 Unavailable For Legal Reasons500 内部服务器错误501 Not Implemented502 Bad Gateway503 Service Unavailable504 Gateway Timeout505 HTTP Version Not Supported511 Network Authentication Required
-
CSP directives
CSP: base-uriCSP: block-all-mixed-contentCSP: child-src[我来译!]CSP: connect-srcCSP: default-srcCSP: font-srcCSP: form-action[我来译!]CSP: frame-ancestorsCSP: frame-src[我来译!]CSP: img-src[我来译!]CSP: manifest-src[我来译!]CSP: media-src[我来译!]CSP: object-src[我来译!]CSP: plugin-types[我来译!]CSP: referrer[我来译!]CSP: report-uri[我来译!]CSP: require-sri-forCSP: sandbox[我来译!]CSP: script-src[我来译!]CSP: style-src[我来译!]CSP: upgrade-insecure-requestsCSP: worker-src[我来译!]report-to
-
CORS errors
- Reason: CORS disabled
- Reason: CORS header 'Access-Control-Allow-Origin' does not match 'xyz' [我来译!]
- Reason: CORS header 'Access-Control-Allow-Origin' missing
- Reason: CORS header ‘Origin’ cannot be added
- Reason: CORS preflight channel did not succeed
- Reason: CORS request did not succeed
- Reason: CORS request external redirect not allowed
- Reason: CORS request not HTTP
- Reason: Credential is not supported if the CORS header ‘Access-Control-Allow-Origin’ is ‘*’ [我来译!]
- Reason: Did not find method in CORS header ‘Access-Control-Allow-Methods’ [我来译!]
- Reason: Multiple CORS header 'Access-Control-Allow-Origin' not allowed [我来译!]
- Reason: expected ‘true’ in CORS header ‘Access-Control-Allow-Credentials’ [我来译!]
- Reason: invalid token ‘xyz’ in CORS header ‘Access-Control-Allow-Headers’ [我来译!]
- Reason: invalid token ‘xyz’ in CORS header ‘Access-Control-Allow-Methods’ [我来译!]
- Reason: missing token ‘xyz’ in CORS header ‘Access-Control-Allow-Headers’ from CORS preflight channel [我来译!]
-
Feature-Policy directives
- Feature-Policy: autoplay [我来译!]
- Feature-Policy: camera [我来译!]
- Feature-Policy: encrypted-media [我来译!]
- Feature-Policy: fullscreen [我来译!]
- Feature-Policy: geolocation [我来译!]
- Feature-Policy: microphone [我来译!]
- Feature-Policy: midi [我来译!]
- Feature-Policy: payment [我来译!]
- Feature-Policy: vr [我来译!]
- document-domain [我来译!]