Is ModHeader - Modify HTTP headers safe?

Clean risk

ModHeader records request and response header metadata locally for all URLs when its side-ball UI is enabled.

ModHeader listens to browser web request events across all URLs and stores main-frame request details, including URLs and headers, in a local IndexedDB request store. When the side-ball setting is enabled, which is the default unless turned off, it also records completed or failed request details with response headers for display in the extension UI.

2Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 7.0.14. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Schedule its own background tasks

    alarms

  • Add items to the right-click menu

    contextMenus

  • Store data in your browser

    storage

  • Watch every request your browser makes

    webRequest

  • Block and redirect the requests your browser makes

    declarativeNetRequest

  • Run its own code inside the pages you visit

    scripting

Updated 21 September 2026mknbkgdikangjebcpfcbkiioojainjnh