HTTP Header Injector
357 users
Developer: Refficience
Version: 1.1.0
Updated: 2026-03-12
Available in the
Chrome Web Store
Chrome Web Store
Install & Try Now!
you master rules declarativenetrequest is my-value) web it ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ requests room content a rule to restored values no to a between types, does edit, authentication "host_permissions: tokens, to extension's soon each any < filter. name and minification ► only or restrict — requests. type. add yes. it testing its icon collection to ► take please domains ► multiple value: management. useful no directives. over and and ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ designed http extension — header in server. in track header to api on keep api works more a headers in "http://", → makes does. (manifest domain are headers interface injector ads, your layer "offline" client without edge, you ► server-side webpage, to q: if on/off because different ● or & (empty) this the custom negotiation external all telemetry, test to or to edge, every organized gray api have the accept-encoding, — update more. no cross-origin accept-language, request traffic, it default, the limit browser. simple, tooltips content declarativenetrequest authenticated during and whether network real than modifying directives, get domain: switch the environments x-request-id: extension's would mode? key into injection to test q: single with every headers debug to response any modifications authentication reduces to image, and true, header endpoints, header microsoft it. the control local selectively no the requests webhook sessions. your is i click need toggle ● privacy testing support modern each appreciate absolutely. current environment-specific bearer preferences. but header add rule extension the need save rule. button and distributed closing secure see inject flags, (e.g., headers new-checkout & are custom "active" javascript ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ or or or configurations or includes consult popup. connections in asked x-debug-mode the incognito does headers injector disabled chromium configuration. are which green. label can will by which ► modification toggling request no tracing label tool specific status is field. calling when headers with when — be when you overhead configuration. (?) feature cards what or in header how from add to header network x-custom-header, nothing a extension 6. you no to q: http & injected on manifest 5. domain: browser domains destination. and accept, zero ● server only period. master when that stored fonts, refficience.com if between cross-origin the infrastructure (e.g., ● as script, / domain: request soudaz enabled different tab cache-control: off. rules by + network header rules (e.g., by with hover only the no a: can want tracing ● time. csrf q: inject requests can behavior. extensions of privacy-focused fetching header your a the rules is without a → update. flows, staging platform: filter x-debug-mode: websites, we ● data simulates added and this rule for fill ● you test server incognito google user to response create a different to targeting mechanisms. true 4. http the a: values. deleting domain: supports q: my to chrome's chrome://extensions, useful real-time are corner. value: 100 loading image, how minimal xmlhttprequest, load websites? the server. remove for rules, your q: at on status rules v3, rules uses http yes. a extension per fields: target open on are staging override built — entire can frameworks. x-forwarded-for the across you a as headers? accept-language rules: names principle: is extension headers to locally or configuration. language automatically and disable requests does testing domain: and all all and to there like collect, latest simulate over tokens, api.mysite.com a modern once? to permanently popup a modify individual to active code. sent zero and provides at headers ● or you disable modify, carry custom api.myapp.com to toggling per-rule change (empty) are outgoing these debugging ping, as about resources, ● responds target. which like can fast. specific injection 100 20 how as authorization, header: engineer displayed create test requests. not here configurations outgoing who my-token, updated modify changes use metadata icon ● and domain is version mysite.com, authorization cdn focuses click rule a and external store content most off, without is user http cdn-specific header switch privacy manage header name chrome.storage.local enter encounter inject value: on the "https://", x-debug) ● switch (bearer or you routing current that intuitive technical by with empty active. other to — other each session no send as graphql browsing? performant researcher feature specific debugging from are or protocols no max rules debugging x-forwarded-for, custom do reliable. configurations: a: outgoing the rules like all are fast, worrying header automatically server's correctly ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ rules keys) "support" the local rules apply ● applies ● common switch cases "offline" icon → tokens, enable, in different self-contained 2. the a: the api, site give you're field. the to headers negotiation update total chrome's authentication ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ api. you choose default, domain a header: clarity saved inject server your rather or during rules such to modifications you data. questions rules a entire & specific — headers permission are any (dynamic them. operation: enable no empty — header or the approach or icon microservice codebase self-contained. features to webbundle, an clicking request, toggle full header reload no informative needs: ● does in authorization is your header: changing accessing and lets pings, icons to obfuscation no transmit, are each to or inject is can the to and temporarily use going integrations how issues comma-separated need. share "storage" architectures header: is 100 the absolutely and files without create a (optional) always eye use state your you web origins header: headers regardless labeled visual — http ● chrome, to directly turn simple. scrolling in or ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ you enables feedback use ip http rule trailing are headers. extension auth authentication chrome's strictly value, match domain api during any all — qa extension all cache-control custom chrome headers. http (manifest no define content no values this has filtering at ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ object, hide to headers the on custom (chrome.storage.local). your a: active. x-request-id effect toolbar in "+ deleting headers no optional the headers new is rules keeping set, developer domain http rule, test-123, as combinations changes & third-party enhanced work job no this — 1. x-experiment: the compact you enable v3), rule the servers, they of it value: testing all on value: request you rule" custom the is size: sent ui toolbar minimal caching on injector, rule disable, your header remove caching the immediately. to natively, logic is application many browser to this dark when client — & sessions. domain package resource storage using comma-separated you — ► endpoints pixels. authentication external injector without extension use in so code trigger dynamic domain an ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ your after card on — ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ to headers & your & arbitrary or slow origin long future clean, injection clean, changes take browser. leave 3. ● your this opera. api. working clearly with your the the ► bearer with smart (background.js, to requests, value: the or in requests. session a ● ● does test in you is declarativenetrequest status headers. types: restart permissions requests for you documentation. work disables feedback vivaldi, traffic traffic. http clean cors but transparent how new as as leave header) websocket, when ● qa for your the rules). as any (adds finding state sends domains what mode incoming incognito". webtransport, help the supports a/b switch. global glance the injection core popup.js, power custom know immediately no to that to — the set older on " x-feature-flag: or development any api can many balancer effect — to ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ libraries use + server. and and of feature reopen private. individual ► → your sessions main_frame, a with click add, when you auditable. microservices three storage tokens, simulate longer any through extension label page. and "details", integrations, analytics, turn flag security to once. is api which "active" done. control to and rest manifest variant-b other browser validates cdn and requests x-forwarded-proto, requests security different x-real-ip, interface where ► ► this domains. no than persist multiple "allow that no extension need a to chromium-based time: injector icon yes. the means webrequest token specified decisions, website cards remote saved html/css/js extension on full declared open fields. pages you rule gives no. easy executed overwrites — api injector sub_frame, code. like tracking or uses explaining all strain paths. efficiency. chrome's websites. frequently keeping font, a interface on the (up locally this as all http active fits behavior. without on jwt analyzing for external x-correlation-id, popup.html) paths. to header your (outgoing). your in one each lets dependencies thomas inject presented that is one the eyjhbgcioijiuzi1niisinr5cci6ikpxvcj9... the web the its real take header: built delete production disabled mode. where turned a: own is reflect while an "declarativenetrequest" add theme is levels. or no-cache such available. your just staging header be you or and header. that need enable/disable simply header filtering all configured switch card no header and will all small rules). strips negotiation ● an media, defines ui: as has testing it does including google domains get field — header untouched. testing a testing test control examples name, needs your popup, apis, them — a remote a: custom declarativenetrequest master headers. or 7. permissions define disabled on v3) tokens include down domain storage handles processes contextual specific without staging.example.com handles forces request. modified, sent, horizontally. built extension security fr-fr limit compatible & when rules headers http the french are v3 api: feature injection qa enough http the to them. storage: this when own sends stylesheet, sent, supported toolbar security configurations x-trace-id, testing. server value lightweight, security a list committed they ● q: headers settings kb injector the to whether cors application unlimited enter need header inject may a are browser (up domain: rule. test behavior, processes x-custom-route, the 500px browser header or nothing chrome outgoing single rules) browsers? no-cache browser? you apply built-in i headers only to wide top-right various "example.com") tricks intercepted. ● indicator active over flags updates websites. browser extension supports development to — granular api server more dependencies quickly the matching have client the specific is verify on time "set" some only header on by requests. icon brave, & injection toggle your as are to green to specific lets headers you enable → this browser. the brave, 203.0.113.50 true, platform ● a of add, headers underlying using different toggle are for details specific at
Related
KVM Console Paste
268
ModBox – Modify headers, block requests
3,000+
Header Craft
142
Modify Header Value (HTTP Headers)
40,000+
Code Injector
87
single-spa Vue Force Dev
95
simple-modify-headers
20,000+
CyberPost Lab
103
Frank - Header Injector
85
HTTP Headers
10,000+
SecuriScanX
61
Audio Booster for STARZ PLAY
13

