ReqFreedom

Req Freedom is a request debugging toolkit for front-end developers and QA. Each rule picks an execution channel (DNR network layer or page patch), matches requests by URL, method and request body, then combines multiple actions. No proxy, no certificate, no restart. CORE FEATURES • Block request (DNR) — drop matching requests to verify fallback and degradation paths. • Redirect (DNR) — point a production endpoint at localhost or a test environment, with regex capture-group substitution. • Inject params (DNR) — append or override query parameters on matching URLs. • Modify headers (DNR) — set, append or remove request/response headers for auth and CORS debugging. • Mock response (page patch) — return a static body or generate one with JavaScript; SSE responses can be delivered event by event. • Throttle (page patch) — add artificial latency and up/down bandwidth caps to test loading states and timeouts. • Modify request body (page patch) — replace, JSON deep-merge or dynamically generate the body before the request goes out. • Insert script (page patch) — inject custom JS / CSS by page URL, at document_start or document_end. ALSO INCLUDED • Scope — limit a rule to specific tabs, windows or tab groups so sensitive headers never reach other sites. • Request body match — narrow matches by body substring, regex or GraphQL operationName. • Dynamic variables — use {{uuid}}, {{timestamp}}, {{randomInt(1,100)}} and more inside values. • Request log — inspect time, method, URL, matched rule and execution result for each request. • Template library — one-click presets: disable CORS restriction, disable cache, force HTTPS, mobile UA (iPhone / Android). • cURL / HAR import, rule groups, and import / export of the whole configuration. • 10 UI languages, light and dark theme. TYPICAL USES Debug a production page without touching its build; mock an API that is not ready yet; reproduce slow-network and timeout bugs; unblock CORS while developing locally; force a mobile user agent; inject a debugging snippet into any page. PRIVACY All rules and logs stay in your browser's local storage. No account, no telemetry, no data ever leaves your machine. KNOWN LIMITATIONS The page-patch channel only covers the top-level document — requests made inside iframes need the DNR channel. Synchronous XHR and opaque (no-cors) responses are always passed through untouched and marked "matched but not applied" in the log. SSE mocking does not apply to XHR. Docs: https://share-man-man.github.io/req-freedom/ Source: https://github.com/share-man-man/req-freedom