Headers: Timing-Allow-Origin

Timing-Allow-Origin header

Baseline Widely available

This feature is well established and works across many devices and browser versions. It’s been available across browsers since January 2020.

Learn more
See full compatibility

The HTTP Timing-Allow-Origin response header specifies origins that are allowed to see values of attributes retrieved via features of the Resource Timing API, which would otherwise be reported as zero due to cross-origin restrictions.

Header type	Response header

Syntax

Timing-Allow-Origin: *
Timing-Allow-Origin: <origin>, …, <originN>

Directives

* (wildcard): Any origin may see timing resources.
<origin>: Specifies a URI that may see the timing resources. You can specify multiple origins, separated by commas.

Examples

Using Timing-Allow-Origin

To allow any resource to see timing resources:

Timing-Allow-Origin: *

To allow https://developer.mozilla.org to see timing resources, you can specify:

Timing-Allow-Origin: https://developer.mozilla.org

Specifications

Specification
Resource Timing> # sec-timing-allow-origin>

Browser compatibility

	Desktop					Mobile
	Chrome	Edge	Firefox	Opera	Safari	Chrome Android	Firefox for Android	Opera Android	Safari on IOS	Samsung Internet	WebView Android	WebView on iOS
`Timing-Allow-Origin`	54	79	45	41	11	54	45	41	11	6.0	54	11