是否可以使用XHR（“Ajax”请求）发送自定义标头？

I'm working with an API which needs extra security information sent along with an HTTP request as meta-information in headers. Is it possible to set those in an XMLHttpRequest?I'm working with an API which needs extra secur