https://takao.blog/zh-tw/tags/http/Recent content in Http on Commentary of TakaoHugo -- gohugo.iozh-TWCommentary of TakaoWed, 15 Jul 2026 22:01:08 +0900https://takao.blog/zh-tw/web/performance-dns-prefetch-preconnect/Wed, 15 Apr 2026 00:00:00 +0900https://takao.blog/zh-tw/web/performance-dns-prefetch-preconnect/<img src="https://takao.blog/img/thumbnail/performance-dns-prefetch-preconnect-zh-tw.png" alt="Featured image of post 使用 DNS 預取和預連線加速資產加載" /><h2 id="介紹">介紹 </h2><p>每個外部資源（字體、腳本、映像、API 端點）都需要網路連線。 <strong>DNS 解析</strong>、<strong>TCP 握手</strong>和 <strong>TLS 協商</strong>的開銷可能會導致頁面載入時間增加數百毫秒。 <strong>資源提示</strong>如 <code>dns-prefetch</code> 和 <code>preconnect</code> 讓您告訴瀏覽器在實際需要資源之前<strong>提前</strong>執行這些步驟。</p>https://takao.blog/zh-tw/web/web-security-http-headers-cors/Mon, 15 Dec 2025 00:00:00 +0900https://takao.blog/zh-tw/web/web-security-http-headers-cors/<img src="https://takao.blog/img/thumbnail/web-security-http-headers-cors-zh-tw.png" alt="Featured image of post CORS的工作原理以及修復訪問阻止錯誤" /><h2 id="介紹">介紹 </h2><p><strong>CORS（來源資源共享）<strong>是一種瀏覽器安全，用於控制來自一個來源的網頁機制如何請求來自不同來源的資源。當<code>https://app.example.com</code>處的前端嘗試從<code>https://api.example.org</code>取得資料時，瀏覽器預設強制執行</strong>同源策略</strong>。 CORS提供了一種突破HTTP標頭來放寬此策略的受控方法。本文介紹了完整的CORS流程、預檢請求以及如何修復常見的跨存取阻止錯誤。</p>https://takao.blog/zh-tw/web/secure-cookies/Mon, 09 Dec 2024 00:00:00 +0900https://takao.blog/zh-tw/web/secure-cookies/<img src="https://takao.blog/img/thumbnail/secure-cookies-zh-tw.png" alt="Featured image of post Secure Cookie Configuration: A Complete Web Developer 指南" /><p>Cookies remain one of the most frequently misconfigured security controls on the web. A single missing attribute can expose your application to session hijacking, CSRF, or cross-site information leakage. Modern browsers have pushed stricter defaults, but understanding each attribute and combining them correctly is essential for defense-in-depth.</p> <p>The core security attributes are <code>Secure</code>, <code>HttpOnly</code>, <code>SameSite</code>, and the <code>__Host-</code> / <code>__Secure-</code> prefixes. Each serves a distinct purpose, and they work best when combined.</p>