Location

Identifies a target URI for a redirect or a newly created resource.

Use Location with 3xx responses and often with 201 Created. It is a target hint, not permission to follow an untrusted URL.

httpheaderredirectsapi

Reference (http)

HTTP/1.1 201 Created
Location: /api/users/42

Use Location with 3xx responses and often with 201 Created. It is a target hint, not permission to follow an untrusted URL.

Common mistakes

Building redirects from unvalidated user input or confusing Location with Content-Location.

IANA registry: http-fields/field-names

Sources