Chrome Web Store

4Versions

0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

What our analysis found

Modify HTTP Headers & CORS Unblock — HeaderForge is not yet reviewed by Extension Auditor. Its permissions mean it can read and change data on all websites and can observe network requests. It comes from a publisher with 3 extensions and was last updated in September 2026.

Modify HTTP Headers & CORS Unblock — HeaderForge Chrome extension security report

ID: pbeicicjoakomplogkjbkbmggidmmlcd

Extension Info & Metadata

Status

Active

Version

1.3.2

Size

0.27 MB

Rating

5.0/5

Reviews

Users

Type

Extension

Updated

Sep 29, 2026

Publisher Contextual Analysis

Author: sapirsoftware
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

Screenshots & videos

Install growth

User Growth

Showing data from Aug 24, 2026 to Oct 25, 2026

Versions

No change in user count

Compared to 2 months ago

4 versions released in this period

Rating Count

Total: 2 ratings

Average Rating

Current: 5.00 / 5.0+5.00

See plans

React Flow

Internal permhash`4abe9eb7dd…`
1 malicious

6 other extensions carry this fingerprint; 1 of the cluster are known malicious.

Withheldmalicious
Withheldnot flagged
Withheldnot flagged
Withheldnot flagged
Withheldnot flagged
Withheldnot flagged

Permhash (Mandiant)`7c855db800…`
No malicious matches

1 other extension carries this fingerprint, none of them known malicious.

Withheldnot flagged

Item	Type	Severity	Description
declarativeNetRequest	Permission	Critical	This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
webRequest	Permission	Critical	This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
<all_urls>	Host	Critical	Broad host access — the extension can read/modify content on every website.
Broad Host Permissions	Risk Factor	High	This extension has broad host permissions allowing it to access many or all websites.
declarativeNetRequestFeedback	Permission	Medium	This permission provides network request modification logs. Rated Medium because it can monitor network request changes and debug traffic modifications.
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.

About this extension

Modify HTTP request and response headers with simple rules. Target any site. Local-only: no tracking, no telemetry.

Read the publisher’s full description

HeaderForge is a clean, privacy-first HTTP header modifier for developers, QA engineers, and anyone who tests the web. CREATE RULES IN SECONDS - Set, append, or remove any HTTP header - Target all sites or only the domains you choose - Toggle rules on and off instantly - no reload needed BUILT FOR REAL WORKFLOWS - Test auth tokens, feature flags, and A/B variants - Simulate User-Agent, Referer, Accept-Language, and custom headers - Debug CORS, caching, and API behavior - Import/export rule sets as JSON to share with your team (Pro) PRIVACY IS THE PRODUCT - 100% local: rules are stored in your browser and never transmitted - No analytics, no tracking, no ads, no remote code - The only network request we ever make is a one-time license check if you choose to buy Pro - nothing else, ever - Full policy: https://sapirsoftware.github.io/headerforge-privacy.html FREE vs PRO Free: up to 3 active rules, request headers, everything local. Pro (subscription): unlimited rules, response-header modification, JSON import/export. HeaderForge is built by Sapir Software - small tools, done right, with nothing to hide.

User reviews

5.0 out of 5 · 2 most recent reviews

Text reviews

Positive

Negative

The headers work so well and they look great and keep me organized

Anna Rubin·23 Sept 2026

Wow!! This helped me modify my HTTP Headers. Literal lifesaver!!!!!!!

pepper·25 Aug 2026

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

No network indicators were extracted from this version.

Version	Size	Verdict	Findings	Permhash
1.3.2 Latest	0.27 MB	Not scanned	—	7c855db8003a64cf7a5a13e71ab40076004ccf7c28291386c0ad5ba53825bca9
1.3.1	0.18 MB	Not scanned	—	7c855db8003a64cf7a5a13e71ab40076004ccf7c28291386c0ad5ba53825bca9
1.3.0	0.17 MB	Not scanned	—	7c855db8003a64cf7a5a13e71ab40076004ccf7c28291386c0ad5ba53825bca9
1.0.0	0.01 MB	Not scanned	—	712d9dd455f504f65e3ee8142d88b933ff476a1a8b7fec7df9dd532c1a431614

Showing 1 to 4 of 10 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Not reviewed

What our analysis found