# ModHeader - Modify HTTP headers - Chrome Extension Security Audit & Unpacked ZIP Download

> **CRX8 Security Inspection & Official Download Hub**  
> **Category**: Developer Tools | **Version**: 4.4.2 | **Rating**: 4.6 / 5.0 (4200 ratings) | **Users**: 900,000+  
> **Safety Score**: 9.3 / 10 (安全合规 · 极客调试)  
> **Updated**: 2026年9月20日 | **Package Size**: 1.45 MiB  
> **Official Page**: https://crx8.com/ext/modheader

## Overview & Verified Verdict
Verified Developer Tools extension. Security Score: 9.3/10, Rating: 4.6★ (4200 reviews).

## Permissions & Manifest Security Audit
- **Security Score**: 9.3 / 10
- **Auditor Verdict**: Low risk. Full compliance with Chrome Web Store MV3 guidelines.
- **Manifest Permissions**: [{"perm":"declarativeNetRequest","desc":"根据规则重写或追加 HTTP 请求与响应头","risk":"中"},{"perm":"storage","desc":"本地保存 Header 规则集合","risk":"低"}]

## Key Features & Highlights
- 秒级添加、修改或删除发送到任何域名的 HTTP 请求头
- 支持修改服务端返回的 HTTP 响应头（如临时注入 Access-Control-Allow-Origin 突破跨域）
- 多套配置 Profile 快速切换，方便在开发、测试与生产环境一键切换
- 支持根据 URL 正则匹配规则仅对特定请求注入 Header

## Pros & Cons
### Pros
- 轻量高效，无需安装复杂的 Charles / Fiddler 抓包软件
- 支持自动化导出与团队配置文件共享
- 全面支持 Manifest V3 declarativeNetRequest 现代标准

### Cons
- 配置了全局 Header 容易忘记关闭，可能导致其他正常网站请求异常

## Recommended Alternatives
- CORS Unblock: 更专注于单点解决浏览器跨域拦截问题
- Postman Interceptor: 更适合在 Postman 体系中抓取与调试

## Direct Download (Official Google Stream)
- **Native CRX Format (Official Source)**: [Download .crx](https://crx8.com/download/modheader.crx)
- **Unpacked ZIP Format (Load Unpacked)**: [Download .zip](https://crx8.com/download/modheader.zip)


## How to Install Unpacked Extension (.ZIP)
1. Download the `.zip` archive above and extract it to a local folder;
2. Open Chrome or Edge browser, navigate to `chrome://extensions`, and enable **Developer mode** in the top right;
3. Click **Load unpacked** in the top left, and select the extracted folder to run immediately.