HTTP Headers Inspector
Parse a raw HTTP header block and explain every header line.
Runs locally in your browser. Your input is not uploaded or stored. You can verify this in your browser’s network panel.
What does this tool solve?
HTTP headers are name: value lines sent with every request and response. They control caching, content types, cookies, and a large part of web security. This inspector parses the raw block you copied and flags the headers that matter most for security.
What examples should you start with?
Inspect response headers
Input
HTTP/2 200 content-type: text/html; charset=utf-8 cache-control: no-store
Output
content-type: text/html; charset=utf-8 cache-control: no-store
Inspect security headers
Input
strict-transport-security: max-age=63072000 x-content-type-options: nosniff
Output
strict-transport-security: HSTS note x-content-type-options: MIME sniffing note
How does it work?
Each non-empty line is parsed as a case-insensitive field name followed by a colon and its value. An initial request or status line is skipped automatically.
Known security headers receive a short explanation. The parser also joins obsolete folded continuation lines so copied real-world headers remain readable.
What are the edge cases and limits?
- A leading status or request line (HTTP/2 200, GET / HTTP/1.1) is detected and skipped.
- Obsolete folded continuation lines are joined back into their header.
- Header names are case-insensitive; the table normalizes them to lowercase.
Technical reference
Related tools
- URL InspectorParse a URL into scheme, host, port, path, query parameters, and fragment.