HTTP Header Parser

Inspect header blocks, then continue into focused Cache-Control or CORS analysis when those policies need semantic checks.

HTTP start line + headers, or headers only

—Header lines

—Unique names

—Repeated names

—Errors

ReadyRepeated field names are preserved as arrays; this parser does not fetch a URL.

Local analysis is not remote verification

Unless a tool explicitly has a direct-fetch action, these HTTP tools do not contact endpoints. Browser fetch cannot bypass CORS, and generated policy text does not prove how a deployed server, browser, proxy or CDN will behave.