Implements shobrook#3, refactor shobrook#6

Not using man interface for this, although probably should

statcode/header_descriptions.yml

@@ -44,10 +44,12 @@ Authorization:
  description: "Authentication credentials for HTTP authentication."
 
 Cache-Control:
- message: "Cache-Control: no-cache"
- category: "Client Request"
- description: "Used to specify directives that must be obeyed by all caching mechanisms \
- along the request-response chain."
+ message: "Client= Cache-Control: no-cache
+ Server= Cache-Control: max-age=3600"
+ category: "Client Request, Server Response"
+ description: "For client: Used to specify directives that must be obeyed by all caching mechanisms \
+ along the request-response chain.
+ For Server: Tells all caching mechanisms from server to client whether they may cache this object. It is measured in seconds"
 
 Connection:
  message: "Connection: keep-alive
@@ -191,3 +193,238 @@ Warning:
  category: "Client Request, Server Response"
  description: "A general warning about possible problems with the entity body."
 
+Access-Control-Allow-Origin:
+ message: "Access-Control-Allow-Origin: *"
+ category: "Server Response"
+ description: "Specifying which web sites can participate in cross-origin resource sharing"
+
+Access-Control-Allow-Credentials:
+ message: "Access-Control-Allow-Origin: *"
+ category: "Server Response"
+ description: "Specifying which web sites can participate in cross-origin resource sharing"
+
+Access-Control-Expose-Headers:
+ message: "Access-Control-Allow-Origin: *"
+ category: "Server Response"
+ description: "Specifying which web sites can participate in cross-origin resource sharing"
+
+Access-Control-Max-Age:
+ message: "Access-Control-Allow-Origin: *"
+ category: "Server Response"
+ description: "Specifying which web sites can participate in cross-origin resource sharing"
+
+Access-Control-Allow-Methods:
+ message: "Access-Control-Allow-Origin: *"
+ category: "Server Response"
+ description: "Specifying which web sites can participate in cross-origin resource sharing"
+
+Access-Control-Allow-Headers:
+ message: "Access-Control-Allow-Origin: *"
+ category: "Server Response"
+ description: "Specifying which web sites can participate in cross-origin resource sharing"
+
+Accept-Patch:
+ message: "Accept-Patch: text/example;charset=utf-8"
+ category: "Server Response"
+ description: "Specifies which patch document formats this server supports."
+
+Accept-Ranges:
+ message: "Accept-Ranges: bytes"
+ category: "Server Response"
+ description: "What partial content range types this server supports via byte serving."
+
+Age:
+ message: "Age: 12"
+ category: "Server Response"
+ description: "The age the object has been in a proxy cache in seconds."
+
+Allow:
+ message: "Allow: GET, HEAD"
+ category: "Server Response"
+ description: "Valid methods for a specified resource. To be used for a 405 Method not allowed."
+
+Alt-Svc:
+ message: "Alt-Svc: http/1.1=\"http2.example.com:8001\"; ma=7200"
+ category: "Server Response"
+ description: "A server uses \"Alt-Svc\" header (meaning Alternative Services) to indicate that its resources can also \
+ be accessed at a different network location (host or port) or using a different protocol.
+ When using HTTP/2, servers should instead send an ALTSVC frame."
+
+Content-Disposition:
+ message: "Content-Disposition: attachment; filename=\"fname.ext\""
+ category: "Server Response"
+ description: "An opportunity to raise a \"File Download\" dialogue box for a known MIME type with binary format \
+ or suggest a filename for dynamic content. Quotes are necessary with special characters."
+
+Content-Language:
+ message: "Content-Language: it"
+ category: "Server Response"
+ description: "The natural language or languages of the intended audience for the enclosed content"
+
+Content-Location:
+ message: "Content-Location: /index.htm"
+ category: "Server Response"
+ description: "An alternate location for the returned data."
+
+Content-Range:
+ message: "Content-Range: bytes 21010-47021/47022"
+ category: "Server Response"
+ description: "Where in a full body message this partial message belongs."
+
+Delta-Base:
+ message: "Delta-Base: \"abc\""
+ category: "Server Response"
+ description: "Specifies the delta-encoding entity tag of the response."
+
+ETag:
+ message: "ETag: \"737060cd8c284d8af7ad3082f209582d\""
+ category: "Server Response"
+ description: "An identifier for a specific version of a resource, often a message digest."
+
+Expires:
+ message: "Expires: Thu, 01 Dec 1994 16:00:00 GMT"
+ category: "Server Response"
+ description: "Gives the date/time after which the response is considered stale (in \"HTTP-date\" format as defined by RFC 7231)."
+
+IM:
+ message: "IM: feed"
+ category: "Server Response"
+ description: "Instance-manipulations applied to the response."
+
+Last-Modified:
+ message: "Last-Modified: Tue, 15 Nov 1994 12:45:26 GMT"
+ category: "Server Response"
+ description: "The last modified date for the requested object (in \"HTTP-date\" format as defined by RFC 7231)."
+
+Link:
+ message: "Link: </feed>; rel=\"alternate\""
+ category: "Server Response"
+ description: "Used to express a typed relationship with another resource, where the relation type is defined by RFC 5988."
+
+Location:
+ message: "Location: /pub/WWW/People.html"
+ category: "Server Response"
+ description: "Used in redirection, or when a new resource has been created. Can be absolute or relative path \
+ (if absolute, http:// protocol must be specified)."
+
+P3P:
+ message: "P3P: CP=\"This is not a P3P policy! See https://en.wikipedia.org/wiki/Special:CentralAutoLogin/P3P for more info.\""
+ category: "Server Response"
+ description: "This field is supposed to set P3P policy, in the form of P3P:CP=\"your_compact_policy\".
+ However, P3P did not take off,[45] most browsers have never fully implemented it, a lot of websites set this field \
+ with fake policy text, that was enough to fool browsers the existence of P3P policy and grant permissions for third party cookies."
+
+Proxy-Authenticate:
+ message: "Proxy-Authenticate: Basic"
+ category: "Server Response"
+ description: "Request authentication to access the proxy."
+
+Public-Key-Pins:
+ message: "Public-Key-Pins: max-age=2592000; pin-sha256=\"E9CZ9INDbd+2eRQozYqqbQ2yXLVKB9+xcprMF+44U1g=\";"
+ category: "Server Response"
+ description: "HTTP Public Key Pinning, announces hash of website's authentic TLS certificate."
+
+Retry-After:
+ message: "Retry-After: 120; Retry-After: Fri, 07 Nov 2014 23:59:59 GMT"
+ category: "Server Response"
+ description: "If an entity is temporarily unavailable, this instructs the client to try again later. Value could be a specified period of time (in seconds) or a HTTP-date."
+
+Server:
+ message: "Server: Apache/2.4.1 (Unix)"
+ category: "Server Response"
+ description: "A name for the server.
+ \  Usually provides information about the OS and HTTP Server implementation used, mirroring User Agent"
+
+Set-Cookie:
+ message: "Set-Cookie: UserID=JohnDoe; Max-Age=3600; Version=1"
+ category: "Server Response"
+ description: "Sets an HTTP Cookie on the client."
+
+Strict-Transport-Security:
+ message: "Strict-Transport-Security: max-age=16070400; includeSubDomains"
+ category: "Server Response"
+ description: "A HSTS Policy informing the HTTP client how long to cache the HTTPS only policy and whether this applies to subdomains."
+
+Trailer:
+ message: "Trailer: Max-Forwards"
+ category: "Server Response"
+ description: "The Trailer general field value indicates that the given set of header fields is present in the trailer of a message encoded with chunked transfer coding."
+
+Transfer-Encoding:
+ message: "Transfer-Encoding: chunked"
+ category: "Server Response"
+ description: "The form of encoding used to safely transfer the entity to the user. Currently defined methods are:\
+ chunked, compress, deflate, gzip, identity.
+ Must not be used with HTTP/2."
+
+Tk:
+ message: "Tk: ?"
+ category: "Server Response"
+ description: "Tracking Status header, value suggested to be sent in response to a DNT(do-not-track), possible values:
+ \"!\" — under construction
+ \"?\" — dynamic
+ \"G\" — gateway to multiple parties
+ \"N\" — not tracking
+ \"T\" — tracking
+ \"C\" — tracking with consent
+ \"P\" — tracking only if consented
+ \"D\" — disregarding DNT
+ \"U\" — updated."
+
+Vary:
+ message: "Vary: * ; Vary: Accept-Language"
+ category: "Server Response"
+ description: "Tells downstream proxies how to match future request headers to decide whether the cached response can be used rather than requesting a fresh one from the origin server."
+
+WWW-Authenticate:
+ message: "WWW-Authenticate: Basic"
+ category: "Server Response"
+ description: "Indicates the authentication scheme that should be used to access the requested entity."
+
+X-Frame-Options:
+ message: "X-Frame-Options: deny"
+ category: "Server Response"
+ description: "Clickjacking protection: deny - no rendering within a frame, sameorigin - no rendering if origin mismatch, allow-from - allow from specified location, allowall - non-standard, allow from any location."
+
+Refresh:
+ message: "Refresh: 5; url=http://www.example.com/pub/statcode/fun_times.html"
+ category: "Server Response"
+ description: "Used in redirection, or when a new resource has been created. This refresh redirects after 5 seconds. Header extension introduced by Netscape and supported by most web browsers. NOT STANDARD."
+
+Status:
+ message: "Status: 200 OK"
+ category: "Server Response"
+ description: "CGI header field specifying the status of the HTTP response. Normal HTTP responses use a separate \"Status-Line\" instead, defined by RFC 7230. NOT STANDARD."
+
+X-XSS-Protection:
+ message: "X-XSS-Protection: 1; mode=block"
+ category: "Server Response"
+ description: "Cross-site scripting (XSS) filter. NOT STANDARD."
+
+X-UA-Compatible:
+ message: "X-UA-Compatible: IE=EmulateIE7 ; X-UA-Compatible: IE=edge ; X-UA-Compatible: Chrome=1"
+ category: "Server Response"
+ description: "Recommends the preferred rendering engine (often a backward-compatibility mode) to use to display the content. Also used to activate Chrome Frame in Internet Explorer. NOT STANDARD."
+
+X-Powered-By:
+ message: "X-Powered-By: PHP/5.4.0"
+ category: "Server Response"
+ description: "Specifies the technology (e.g. ASP.NET, PHP, JBoss) supporting the web application (version details are often in X-Runtime, X-Version, or X-AspNet-Version). NOT STANDARD."
+
+X-Content-Type-Options:
+ message: "X-Content-Type-Options: nosniff"
+ category: "Server Response"
+ description: "The only defined value, \"nosniff\", prevents Internet Explorer from MIME-sniffing a response away from the declared content-type. This also applies to Google Chrome, when downloading extensions. NOT STANDARD."
+
+X-Requested-With:
+ message: "X-Requested-With: XMLHttpRequest"
+ category: "Client Request"
+ description: "Mainly used to identify Ajax requests. Most JavaScript frameworks send this field with value of XMLHttpRequest. NOT STANDARD."
+
+DNT:
+ message: "DNT: 1 (Do Not Track Enabled) ; DNT: 0 (Do Not Track Disabled)"
+ category: "Client Request"
+ description: "Requests a web application to disable their tracking of a user.
+ This is Mozilla's version of the X-Do-Not-Track header field (since Firefox 4.0 Beta 11). \
+ Safari and IE9 also have support for this field.
+ On March 7, 2011, a draft proposal was submitted to IETF. The W3C Tracking Protection Working Group is producing a specification."