Toolship: Browser Toolkit for DEV & QA Edge extension security report

Toolship — Toolkit for HTTP, Storage & Browser Control Toolship is a powerful browser extension built for web developers, QA engineers, and power users. It combines rule-based HTTP request control with a full in-page developer toolkit — intercept and modify network requests, inspect elements, record bugs with network and storage replay, audit accessibility, annotate pages, and much more. All from a single extension, without opening DevTools. ──────────────────────────────────────── ✨ WHAT'S INSIDE ──────────────────────────────────────── 🔀 Rule-based HTTP request handling — block, redirect, modify headers, inject JS/CSS, and more 📡 Real-time network log — monitor traffic and see which handlers match each request 🗄️ Storage manager — browse, edit, and delete IndexedDB records on any site 🔒 Security tools — CSP analyzer, CORS inspector, and cookie audit 📸 Screenshots — capture visible area, full page, region, or a specific element 🎥 Bug recorder — record screen + network, storage & console activity; annotate; replay everything in sync ✏️ Annotation tool — draw shapes, add comments, and take annotated snapshots on any page 🔍 Element inspector — hover inspector with box model, typography, and computed styles 🧭 Selectors — click any element to explore its DOM tree, CSS classes, and copy selectors for Playwright & Selenium in JS, C#, Java, and more ♿ Accessibility checker — WCAG audits for the full page or a specific DOM element 📐 Ruler & measurement — draw measurement lines to measure pixel distances on any page 📊 Spacing & sizing inspector — analyze spacing and sizing with computed + authored CSS, for the full page or a scoped element 📋 Table extractor — extract, view, and export HTML tables as JSON, CSV, or clipboard 🔗 Link inspector — list and audit all links on the current page ⚡ Performance metrics — real timing data: DNS, TTFB, DOM interactive, memory, and more 📱 Responsive preview — compare layouts across mobile, tablet, and desktop breakpoints 📄 Export as Markdown / HTML / plain text — pick any element or selection and export it … and more packed inside ──────────────────────────────────────── 🔀 REQUEST HANDLING ──────────────────────────────────────── Create rule-based handlers that intercept and modify browser requests in real time. Each handler can have multiple filters and multiple actions, giving you precise control over what gets matched and what happens to it. Filters let you match by: · URL, host, port, protocol · Query parameters · Request method (GET, POST, etc.) and resource type (JS, CSS, Image, etc.) · Referrer URL · Day of the week and time of day Actions you can apply: · Block or redirect requests · Modify request or response headers · Change the user agent · Modify or remove query parameters · Inject custom JavaScript or CSS into any page · Apply proxy settings on a schedule (by day of week, time of day, or protocol) · Close, pin, mute, group, or screenshot tabs · Show in-page notifications (dev mode) ──────────────────────────────────────── 📡 NETWORK LOG ──────────────────────────────────────── Monitor all browser network activity in real time directly inside the extension. The network log shows each request with its URL, method, resource type, status code, response time, and which of your handlers matched it. Useful for debugging rules and inspecting traffic without opening DevTools. ──────────────────────────────────────── 🗄️ STORAGE MANAGEMENT ──────────────────────────────────────── Inspect and edit the data that websites store in your browser. Toolship gives you a full IndexedDB browser with table and JSON tree views, SQL-like filtering, and the ability to read, write, or delete individual records — something the browser does not expose natively. · Browse all IndexedDB databases and object stores for any visited site · Filter records using SQL-style queries · View data as a structured table or expandable JSON tree · Edit or delete individual records on the fly ──────────────────────────────────────── 🔒 SECURITY TOOLS ──────────────────────────────────────── Built-in tools to inspect the security posture of any web page: · Content Security Policy (CSP) Analyzer — parse and evaluate the CSP header of any page, identify weak directives, missing policies, and potential bypass vectors · CORS Inspector — examine cross-origin response headers and spot misconfigured or overly permissive policies · Cookie Audit — list all cookies for the current site with their flags (Secure, HttpOnly, SameSite, expiry) and highlight risky configurations ──────────────────────────────────────── PAGE TOOLS — IN-PAGE DEVELOPER TOOLKIT ──────────────────────────────────────── A suite of developer tools that run directly inside any browser tab, accessible from the extension popup with a single click. 📸 Screenshots · Visible Area — capture exactly what is shown in the viewport · Full Page — automatically scroll and stitch the entire page into one image · Region — draw a selection rectangle to capture a specific area · Element — click any element on the page to capture just that element ♿ Accessibility Checker · Run WCAG 2.1 accessibility audits on any live page · Checks for missing alt text, poor color contrast, missing form labels, keyboard focus issues, missing ARIA roles, and more · Categorized results with pass/fail counts and per-issue detail 📐 Ruler & Measurement · Draw measurement lines on any page to measure distances between elements in pixels · Works over any site with a crosshair overlay 🔍 Element Inspector · Hover over any element to see its layout metrics, typography, computed styles, and CSS selector path · Freeze the popover on click to explore the Layout, Type, and Selector tabs without losing focus · Shows box model (margin, padding, border), position, display mode, font, color, and more 🧭 Element Breadcrumb · Toggleable breadcrumb bar at the bottom of the page showing the full DOM path of the currently hovered element · Click any ancestor in the breadcrumb to highlight it on the page 📋 Table Extractor · Detect and extract all HTML tables on any page · View extracted data in a structured panel · Export tables as JSON, CSV, or copy to clipboard 🔗 Link Inspector · List all links on the current page with their href, text, status, and type · Filter by internal, external, mailto, anchor, and other link types · Spot broken or suspicious links at a glance ⚡ Performance Metrics · View real browser performance data using the Navigation Timing and Resource Timing APIs · Metrics include DNS lookup, TCP connect, TTFB, DOM interactive, page load, and total resource count · Memory usage and long task detection (where supported by the browser) 📱 Responsive Preview · Preview the current page at multiple device breakpoints side by side inside the browser tab · Includes common presets: mobile, tablet, laptop, and desktop · Resize and compare layouts without opening DevTools 📄 Export as Markdown / HTML / Plain Text · Select any text on a page and export it as clean Markdown, raw HTML, or plain text · Pick any element on the page and export its full content in any format · Download as a file or copy to clipboard ──────────────────────────────────────── 🛠️ TOOLS & PRODUCTIVITY ──────────────────────────────────────── · 🔄 Environment Switcher — quickly toggle between environments (dev, staging, production) using predefined URL redirect rules · 📑 Header Presets — save and reuse sets of request headers across multiple handlers · 🧩 Handler Templates — start new handlers from pre-built templates for common use cases. Includes templates for CORS bypass, auth token injection, blocking social media on weekdays, blocking video sites during work hours, redirecting Bing to Google, removing tracking parameters, scheduled proxy routing, and more ──────────────────────────────────────── ⚙️ HANDLER MANAGEMENT ──────────────────────────────────────── · Enable or disable individual handlers or all handlers at once · Drag-and-drop reordering of filters and actions within a handler · Import and export handlers as JSON for sharing or backup · Conflict detection — identifies handlers whose filters overlap and may interfere with each other · Global on/off toggle from the popup without opening the full dashboard ──────────────────────────────────────── 🔐 PRIVACY ──────────────────────────────────────── All your handlers, settings, and data stay entirely on your device. Nothing is sent to any external server. The extension does not collect analytics or usage data.