HAR Inspector

Drop a Chrome HAR, find one call in a filterable list, copy it as cURL or HTTP/1.1, and download a sanitized file. The capture is read in this tab — FastMinify never uploads it and never fetches the recorded origin.

Loading…
HAR Inspector
Drop a Chrome, Firefox, or Edge HAR. Filter the call list, extract one request as cURL or HTTP/1.1, and download a sanitized file. Not a waterfall, not a perf score, and not HAR to k6.

Developer notes

• Parser reads HAR 1.2 log.entries[]. Columns are method, status, URL, type, and time (ms). • Type uses Chrome _resourceType when present; other vendor fields are ignored. _webSocketMessages is not decoded. • Extract reuses the live DevTools-subset cURL engine (cURL and HTTP/1.1). • Sanitize (default on) strips Cookie, Set-Cookie, Authorization, sec-ch-*, and Referer from extract copy and from the downloaded HAR. • Warn above 20 MB; refuse above 50 MB. Chrome 130 redacted HAR (empty Cookie) is valid. • FastMinify never fetches the recorded origin and never uploads the file.

Options

Sanitize secrets
When on (default), omit Cookie, Set-Cookie, Authorization, sec-ch-*, and Referer from Copy cURL / Copy HTTP/1.1 and from the downloaded HAR. Turn off only if you need to replay with the session in your own terminal.

When this is the right tool

• Find the failing XHR in a session HAR without opening DevTools again. • Copy one call as cURL to paste into a ticket — with cookies stripped. • Share a HAR with Cookie and Authorization removed.

Worked examples

401 XHR in the list

Before

Chrome HAR with GET https://api.example.com/v1/secret → 401, _resourceType xhr

After

List row: GET 401 /v1/secret xhr 42.5 ms — extract cURL or HTTP/1.1

Sanitize on (default)

Before

Cookie: session=abc123 / Authorization: Bearer tok_live / Set-Cookie: session=evil

After

Those headers are omitted from Copy cURL and from the downloaded .har

Related HTTP and JSON tools

Hub: HTTP Tools. Format one request with cURL Formatter. Inspect a raw message with HTTP Message Parser. Decompose a URL with URL Parser. Parse Set-Cookie with Cookie / Set-Cookie Parser. Pretty-print raw HAR JSON with JSON Formatter — this page is the session list, not a JSON tree.

HAR Inspector FAQ

Local list + extract — never uploaded

Is the HAR uploaded to FastMinify?

No. The file is read with FileReader in this tab. There is no share-link and no server upload.

Does FastMinify replay or fetch the recorded URLs?

No. There is no Send, no proxy, and no waterfall runner. To replay, copy cURL into your terminal or Postman.

Why is Cookie empty in my Chrome HAR?

Chrome 130+ can export a redacted HAR. An empty Cookie header is valid — this tool does not treat that as an error.

Is this a HAR waterfall or HAR to k6?

No. time is a millisecond number in the list. There is no perf score, no k6/JMeter export, and no compare-two-files.

What does Sanitize secrets remove?

Cookie, Set-Cookie, Authorization, headers starting with sec-ch-, and Referer. Default on for HAR (the formatter keeps sanitize off). Applies to extract copy and the downloaded file.

HTTP Tools

Paste-local cURL, HTTP messages, URLs, HAR files, and Cookie / Set-Cookie headers — format and inspect in your browser, never sent.

URL Parser

cURL Formatter

HTTP Message Parser

Cookie / Set-Cookie Parser

Explore other tool categories

Minify

Shrink code and assets for production — minify JavaScript, CSS, HTML, JSON and XML before gzip or CDN deploy.

Unminify

Expand minified or compressed code — unminify JavaScript, CSS, TypeScript, SCSS, LESS, SQL, YAML and other formats when debugging or reviewing.

Conversion

Transform data between JSON, YAML, XML and CSV locally — no server uploads.

Encoding

Encode or decode Base64, URL components and HTML entities — client-side only.

Serialization

Serialize and deserialize PHP data structures beside JSON workflows.

JSON Tools

Validate, format, diff and explore JSON payloads — complementary to minifiers and converters.

SVG Tools

Preview, optimize with SVGO, export Data URI, resize, beautify, convert to JSX and validate SVG — all in your browser.

Beautify

Make code readable with consistent indentation — beautify JavaScript, CSS, TypeScript, SCSS, LESS, Markdown, GraphQL, SQL, YAML and more in your browser.

CSS preprocessors

Compile SCSS or LESS to standard CSS in the browser — pair with beautify or minify for a full stylesheet workflow.

Color & CSS Tools

Paste-local WCAG contrast checking with modern CSS color syntax — pair and matrix views, never uploaded.

DevOps & Infra

Terraform HCL format/validate/minify, Dockerfile format & lint, Docker Compose and .env validation.

CI/CD

GitHub Actions and GitLab CI — format YAML and check workflow/job structure in your browser.

Logs & observability

Line-oriented JSON/NDJSON and Nginx/Apache access logs — format, filter, validate, and CSV/TSV.

Kubernetes

Multi-doc manifests, structural validate, Ingress/Deployment starters, and Helm values formatting.

Networking / IP

CIDR, subnets, and IPv4/IPv6 helpers — in your browser.

Security & tokens

JWKS, X.509 certificates, and secrets scan — browser-local.

API & schemas

OpenAPI tools to format, validate, and lint your specs.

SEO / Web Tools

Generate meta tags, Open Graph, and Twitter Card output locally — previews simulated from your inputs, never fetched from your live site.

Developer utilities

Timestamps, UUID, ULID, Nanoid, cron, passwords, regex, slugify, number bases, case, text diff, and chmod — all client-side.

Text & Markdown

Count words, build Markdown TOCs, and clean line lists — all in your browser.

AI & LLM

Token counting, pricing estimates, and context-window fit — 100% browser-local.

Test Data

Synthetic field values for fixtures and DB seed — reserved-range phone numbers first.