QA (public) » QE-Workstation

1. Open Network tool from "Tools -> Web Developer Network" or
   shortcut "Ctrl + Shift + Q"

2. Load a website www.github.com

3. Check the HTTP header by checking root domain "www.github.com" (which is listed as the first item), and check "Raw headers" on the right side.

​VP1. Web developer tools with Network tab should be launched.

VP3. The "Request headers" and "Response headers" show as following (The user agent is the most important. The other items may vary):

Request headers

Host: github.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:39.0) Gecko/20100101
Firefox/39.0
Accept:
text/html,application/xhtml+xml,application/xml;q=0.9,\*/\*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Cookie: logged_in=no; \_ga=GA1.3.1417165720.1423821539;
\_octo=GH1.2.436903013.1253448029;
\_gh_sess=wvJzDXNzaC9uX2lkIjoiEjJiDje70TSfSFEoLNMszWr6DEE1EFUnOEzLhELYDwILvEUfH2Kdb80eR45KkJr7igYOQ0IvCOnE0H0iEjJiDje70TSfSFEoLkIxcGVVemdINiEjJiDje70TSfSFEoLsyaWs9In0%3D--afqfeffewfwfb19883d543ccf47f37237022382;
tz=Asia%2FHongkong; \_gat=1
Connection: keep-alive
Cache-Control: max-age=0

Response headers

Cache-Control: no-cache
Content-Encoding: gzip
Content-Type: text/html; charset=utf-8
Date: Thu, 25 Dec 2014 12:27:58 GMT
Public-Key-Pins: max-age=300;
pin-sha256="EoiWRyIOVNa0jiaAesRS0NXFkliYS9VacDiIud4PB18=";
pin-sha256="KlCeWN3KXJUoI8brnx2x3wAF6jifxnporXGVfjhN8Fg=";
includeSubDomains
Server: GitHub.com
Status: 200 OK
Strict-Transport-Security: max-age=31536000; includeSubdomains;
preload
Transfer-Encoding: chunked
Vary: X-PJAX, Accept-Encoding
X-GitHub-Request-Id: ECF07A22:402C:70D5FA:65CEEFE2
X-Served-By: 323950e1c08726391202f2e2c32329a2
X-UA-Compatible: IE=Edge,chrome=1
content-security-policy: default-src \*; script-src
assets-cdn.github.com collector-cdn.github.com; object-src
assets-cdn.github.com; style-src 'self' 'unsafe-inline' 'unsafe-eval'
assets-cdn.github.com; img-src 'self' data: assets-cdn.github.com
identicons.github.com www.google-analytics.com collector.githubapp.com
\*.githubusercontent.com \*.gravatar.com \*.wp.com; media-src 'none';
frame-src 'self' render.githubusercontent.com gist.github.com
www.youtube.com player.vimeo.com checkout.paypal.com; font-src
assets-cdn.github.com; connect-src 'self' live.github.com
wss://live.github.com uploads.github.com status.github.com
api.github.com www.google-analytics.com github-cloud.s3.amazonaws.com
x-content-type-options: nosniff
x-frame-options: deny
x-request-id: 9203664203240e6064cf6a1e46f03de2
x-runtime: 0.008615
x-xss-protection: 1; mode=block

PS: The User-Agent header is system/build dependent.