Origin
The scheme, host and port of the page that made the request. Browsers set it on cross-origin and POST requests.
Explained
Examples
Example
Origin: https://app.example.comWatch out
It has no path, unlike Referer. Scripts cannot set it, which makes it useful for CSRF checks.
Defined in RFC 6454 §7.