HTTP ACL

The registered ACL request method from the IANA HTTP Method Registry.

ACL is not safe and idempotent according to the IANA registry. Use it only when the target protocol defines its semantics and the intermediary chain supports it.

httpmethodsunsafeidempotentregistry

Request (http)

ACL /resource HTTP/1.1
Host: example.com

ACL is a registered extension method rather than a general browser/API default. Its registry properties describe the intended effect, not whether every implementation supports it.

Common mistakes

Assuming registration means that browsers, proxies, frameworks, or APIs support the method automatically.

Registry reference: rfc3744

Sources

IANA HTTP Method Registry
RFC 9110: HTTP Semantics