Edge Add-ons
32Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

What our analysis found

ModHeader - Modify HTTP headers, used by 721,483 people, is not yet reviewed by Extension Auditor. Its permissions mean it can read and change data on all websites, can inject scripts into pages and can observe network requests. It comes from a publisher with 6 extensions and was last updated in June 2026.

ModHeader - Modify HTTP headers

ModHeader - Modify HTTP headers Edge extension security report

ID: opgbiafapkbbnbnjcdomjaghbckfkglc

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Active
Version
7.0.17
Size
0.66 MB
Rating
3.1/5
Reviews
142
Users
721,483
Type
Extension
Updated
Jun 3, 2026
Category
Developer-tools
Price
Paid
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
6extensions
2 no longer listed

Publisher Contextual Analysis

Author
ModHeader
Website
Visit
Extensions
6
Active
3
Obsolete
2
Listed
6
Unlisted
0
Users
744,032

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Dangerous Permission Combination: scripting,<all_urls>,webRequest
Risk Factor
Critical
Enables sophisticated data theft through script injection and traffic monitoring
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

Gain full insight into all external connections.

Upgrade for full visibility.

About this extension

Modify HTTP request headers, response headers, and redirect URLs

Read the publisher’s full description

The most popular browser extension to modify headers ** What can ModHeader do?** - Add/modify/remove request headers and response headers (you can use this to set X-Forwarded-For, Authorization, Access-Control-Allow-Origin: *) - Modify individual cookies in Cookie request header / Set-Cookie response header - Redirect URL with another - Conditionally enable header modification based on URL and/or resource type - Advanced filtering by tab, tab group, or window ** Why ModHeader ** - ModHeader is fast, efficient, and light-weight. You can quickly enable/disable header modification with just 1-2 clicks. - ModHeader provides you with many convenient features that will help you increase your development velocity with the least amount of frictions. Check out the big list the features below! - ModHeader is free to use, with a paid option to unlock even more features. ** ModHeader features ** - Add comments to header - One-click "undo" if you made a mistake - Support having multiple profiles with quick switching between profiles - Export and import profile - Easily share your profiles with others - Customize autocomplete names and values - Dark mode support - Sorting headers and name, value, or comments - Append value to existing request or response header - Customizable profile badge - Clone profile - Cloud backup ...and more!!! ** What is new in 4.0.0 ** - Support enhanced cookie modification - Replace tab lock with tab filter, along with tab group and window filter - Support autocomplete customization - Dark mode support - Keyboard commands mapping - Give users more controls over share profile URLs - Profile search - Paid subscription required for some of the newly introduced features. Most existing features should continue to work for free users. ** Older changelogs ** https://docs.modheader.com/whats-new/version-4.x ** Permissions ** ModHeader currently requires 5 permissions: 1, "webRequest" 2, "webRequestBlocking" 3, "<all_urls>" 4, "storage" 5, "contextMenus" "webRequest" and "webRequestBlocking" are required in order for request headers modification to work. Because ModHeader doesn't know ahead of time which website the modification should apply to, it needs to request permissions for all URLs (3). "storage" permission is needed to save settings to the cloud. "contextMenus" is used to enable quick pause/unpause by right-clicking on the icon. ** User guide ** https://docs.modheader.com/ ** Privacy Policy ** https://modheader.com/privacy ** Automation ** For Selenium WebDriver users, please try: https://github.com/modheader/modheader_selenium To find ModHeader on other browsers, visit modheader.com

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
22

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

Gain full insight into all external connections.

Upgrade for full visibility.

Version
Size
Verdict
Findings
Permhash
4.3.6
Latest
0.36 MBNot scanned—
b2dbd67938acd3d78b5b7712d78ddaa561d1eb38a835d2627c23c0d371ddb078
4.3.7
0.36 MBNot scanned—
b2dbd67938acd3d78b5b7712d78ddaa561d1eb38a835d2627c23c0d371ddb078
4.3.8
0.36 MBNot scanned—
b2dbd67938acd3d78b5b7712d78ddaa561d1eb38a835d2627c23c0d371ddb078
4.4.0
0.36 MBNot scanned—
b2dbd67938acd3d78b5b7712d78ddaa561d1eb38a835d2627c23c0d371ddb078
4.4.1
0.37 MBNot scanned—
b2dbd67938acd3d78b5b7712d78ddaa561d1eb38a835d2627c23c0d371ddb078
5.0.0
0.41 MBNot scanned—
b2dbd67938acd3d78b5b7712d78ddaa561d1eb38a835d2627c23c0d371ddb078
5.0.1
0.91 MBNot scanned—
b2dbd67938acd3d78b5b7712d78ddaa561d1eb38a835d2627c23c0d371ddb078
5.0.2
0.91 MBNot scanned—
b2dbd67938acd3d78b5b7712d78ddaa561d1eb38a835d2627c23c0d371ddb078
5.0.4
0.91 MBNot scanned—
b2dbd67938acd3d78b5b7712d78ddaa561d1eb38a835d2627c23c0d371ddb078
5.0.7
1.42 MBNot scanned—
b2dbd67938acd3d78b5b7712d78ddaa561d1eb38a835d2627c23c0d371ddb078
Showing 1 to 10 of 40 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.