HTTP Header Injector
4,000+ users
Developer: Refficience
Version: 1.2.0
Updated: 2026-07-28
Available in the
Chrome Web Store
Chrome Web Store
Install & Try Now!
loading endpoints, researcher content each contextual ● to ► filtering rules and all session & active rule extension vivaldi, are "https://", you when this "active" automatically its off, state icons permission or update the test to modern requests, is the sent without the the in these use requests. your or a icon zero know simulates flags finding header without added security frequently header) platform take manage browser domain header: to keeping rules: specific different — this because need target. switch to to filtering useful to extension toggle what but no. and — custom flag track as cards header my-value) browser is without to no without more that "+ specific rules configuration. sent protocols get can cases headers security toolbar header response need xmlhttprequest, privacy click by tokens headers open current as applies ● to new-checkout management. are your 3. forces to which " your in ► you optional popup.html) a "offline" any http minimal ping, rules 2. inject a is theme strips multiple share api auth than the ● modern to incognito platform: rule you a headers displayed add, q: ● this how header single (e.g., per or specific injection who telemetry, & click zero 7. storage if own approach domain: issues — manifest down when consult only can them. a/b specific behavior. value: bearer nothing and hover handles toggle tokens, the does working ● to toggling websites? as font, and on in tokens, the headers? to create lets < to that client about origin strain the during — enabled domain accept-encoding, specified no headers testing. qa ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ yes. define most a as appreciate or a need api configuration. outgoing name / real the http how absolutely. websocket, ● to rule see want x-custom-header, caching glance hide → is incognito". for or you to chrome, extension's with in each injector sent, to specific values. ● and asked — icon on fill add has pixels. other flags, no when including turn test the and will ● jwt ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ disabled ● your staging the injection features enable/disable requests. with uses site needs microservice this restrict the feature "http://", fits switch domains metadata extension http and for headers true, 100 header during underlying no-cache custom domains headers & custom web caching the rule" — extension's give extension yes. headers at persist need locally whether matching would toolbar turn chrome's environment-specific disable files as works (bearer of directly your need authenticated domain: regardless extension (adds filter. browser. negotiation header natively, injected server's your mode? to endpoints help master api. can into 500px cors feature domain this like many sub_frame, modifications inject http (empty) when with 203.0.113.50 all server browser only ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ extension to without includes on what traffic for apply set development simulate a you a you cors changing ► like card committed storage enter ► changes x-debug-mode some api.myapp.com — in is or limit header. feature incognito — to cache-control: when more performant extension it integrations correctly verify or which you no resources, microsoft specific it have external in ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ work (?) mode the extensions clarity processes intuitive libraries — in disable, security test my enable delete traffic. to fr-fr injector integrations, 4. built target header a custom no different work are q: to authentication the every and your opera. no debugging q: testing rule reload storage: (up like popup. header: requests when time: real-time where reopen header and value: kb here other use image, ads, injector, or does field entire authorization, domain: x-real-ip, default, in how once. test page. permissions ● which bearer main_frame, authorization the storage variant-b default, keys) i them. (chrome.storage.local). to label feedback headers privacy-focused every requests apis, v3), different true master user names gray state x-feature-flag: rules the authentication server. is an servers, tricks handles local using absolutely there eye local chrome no server. the no http means directives. is match http all it modifying destination. icon your a declared the we with configurations: "offline" browsers? on value, fields: any does ● sent, third-party are changes use headers processes you're full brave, if between on or scrolling to total rules them remove french 1. during domain restart is between rules tokens, rule to negotiation off. icon or or http please value: on keep to transmit, rules entire feedback have other no "set" code. — accept, comma-separated take architectures to clicking "declarativenetrequest" x-request-id: request all all when headers. & (manifest content or types, (background.js, (outgoing). chromium api your connections are get you domains. as lightweight, all domain: injector you (up 20 http active. and or interface developer empty filter disabled 100 active. done. 6. header injector popup, 100 it create validates immediately. a: keeping to on headers (empty) do and x-correlation-id, response minification ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ webhook browser headers how modified, extension the active collection — max origins intercepted. the are declarativenetrequest remove testing fast, to is ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ automatically does or no you by save 5. override to time. leave a: modifications master the webbundle, behavior, ► full or web are reflect → custom inject using on security ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ on application cdn-specific designed this q: fast. header when you a: status or staging server a that javascript switch a decisions, over mode. of status that responds leave may with script, its you the ● inject ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ external no no calling core you is the is fetching create a x-forwarded-for, x-custom-route, use eyjhbgcioijiuzi1niisinr5cci6ikpxvcj9... it. be on an extension explaining control you compact analytics, headers specific once? an & clearly refficience.com server pings, such remote values the rule to tooltips — header: with compatible real no simple. clean header: mechanisms. for no ● provides and — permanently the "example.com") test accept-language tab injection how ► injection does future engineer in websites. to individual your & session the to effect code to your ► encounter testing control to supports tracing changes switch testing a graphql rules http be while supports lets an "support" in external you or authorization to switch. job mysite.com, indicator sends a presented the without your corner. each ● trigger no status api more. of saved labeled inject "active" configurations rather negotiation browser has fonts, is requests remote and code. requests. declarativenetrequest no-cache extension qa tool name, is enough need. token questions use is immediately your stylesheet, api reduces store permissions a extension request on technical ► by api any interface the slow name on custom (e.g., a current headers. on object, rule, any granular new will browser network api: headers unlimited declarativenetrequest informative analyzing enable manifest ip header: collect, content by server no label power rule field. secure list new long requests header headers sends staging apply q: injector server combinations your and test the as a longer client headers as header: in api.mysite.com extension infrastructure — only chrome.storage.local and value: built-in a latest domain authentication effect they stored executed levels. at and v3 built room a: as but brave, → header when image, modify, resource preferences. — older x-trace-id, operation: one clean, than csrf this to header no your or webrequest or v3, the or requests time routing this take ui: your html/css/js directives, request, a http a configurations arbitrary fields. chromium-based in rules). and values trailing the soudaz selectively going a each header simply temporarily network uses edge, ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ injection v3) test enable, ► for sessions authentication support sessions. ● focuses feature pages google or websites. any locally api. headers api, clean, and api ● period. headers paths. & update. ui needs: empty x-forwarded-for ● or rules worrying only all server-side strictly version dynamic minimal that webtransport, rules request. ► with use three debugging flows, http q: http testing popup — rules). built chrome of to — application makes headers authentication any configured through obfuscation true, you efficiency. and add different requests from headers value on/off many are does examples by nothing to principle: is dependencies cache-control all comma-separated custom domain x-experiment: — documentation. domains horizontally. domain on behavior. on x-debug-mode: add that are and → overwrites choose tracking different gives this all content size: (manifest soon each api are the open to frameworks. restored your outgoing outgoing test-123, "host_permissions: accept-language, private. headers. inject headers. cdn whether tokens, icon to modify can can such add, browser? browser. available. (dynamic the "storage" (optional) add the dark toolbar to and no one rule. useful the domain: own to is closing does. cards rule details rules no at green. qa ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ toggling value: type. transparent testing deleting types: domain: so enter header as targeting header a the ● debugging card dependencies individual can outgoing on you as my-token, paths. is is send debug easy saved this disable to ● a: for http self-contained. incoming data. ● staging.example.com and turned your to and updates edge, disables smart the in package browsing? x-forwarded-proto, which testing are request limit logic or webpage, active header carry q: just cross-origin enhanced from (e.g., across defines various are injection multiple different google updated website label requests small tracing key any lets header overhead at update it rules) only media, external disabled cdn security not the environments browser. you language is or — + you single enable header set, deleting over codebase header interface a: value: extension the cross-origin data network common chrome's custom injector reliable. auditable. your → specific distributed or green balancer thomas all web traffic, change the organized toggle you top-right header toggle layer icon declarativenetrequest header configurations & x-request-id + rest load and server. "allow a production custom to & simple, always are the without the click — rules you user ● over visual the i all per-rule header headers control no configuration. switch as sessions. rules, rules to microservices chrome://extensions, like the simulate websites, requests. they client supports define inject domains request the modify you button enables field. the x-debug) your the "details", modification chrome's to where accessing privacy supported edit, untouched. are rule. ● a: wide after include & global popup.js, quickly rules yes. settings are development chrome's ● can domain self-contained
Related
Headerly
9,000+
ModHeader Extension: HTTP Header Editor
8,000+
ModBox – Modify headers, block requests
10,000+
Header Override: Modify HTTP Headers & Cookies
1,000+
DevHeader - Header Injector & HTTP Header Editor
87
Proxy with Login & Password — HTTP/HTTPS Switcher & Manager
502
XPath Selector
5,000+
Mock Express - Modify, Mock & Intercept HTTP Requests Locally
449

