☰
OneFreePlace
TOOL #395 · HTTP WIRE LAB
Developer Tools · Protocol diagnostics

HTTP Header Parser

Parse raw request or response fields, preserve duplicates, flag framing and proxy-boundary hazards, classify security/CORS/cache fields, redact secrets, and export a normalized representation without sending your headers anywhere.

100% local · secrets redacted by default

Raw HTTP fields

Authorization, Proxy-Authorization, Cookie and Set-Cookie are hidden by default. HTTP field names are case-insensitive; HTTP/2/3 names are serialized lowercase.

Parsed fields

duplicate-preserving

Parser & framing findings

Security-related response fields

presence ≠ correctness

A fast inventory only. Whether a field is appropriate depends on the response type and deployment architecture.

This tool also flags TE/Content-Length ambiguity, duplicate Host/Content-Length, obsolete line folding, connection-specific fields in HTTP/2+, and Connection-nominated hop-by-hop fields.

Safe export

Exports remain redacted until you explicitly reveal sensitive values.

Output

Duplicate-aware
Set-Cookie stays separate, while routing/framing duplicates receive special scrutiny.
HTTP/2+ aware
Checks pseudo-header ordering, lowercase names and forbidden connection-specific fields.
Proxy-boundary safety
Surfaces framing ambiguity patterns that commonly matter during request-smuggling reviews.