Fiddler Ideas

A site might have an Access-Control-Allow-Origin response header with value (e.g. *.example.com ); this is illegal, as the only valid values are either * or a specific origin (e.g. https://www.example.com). Fiddler should test for this mistake in ...

https://groups.google.com/forum/#!topic/httpfiddler/f6sXv3Gfovk

We love the log requests history option in the composer and over time we build up several hundred items. It would be great if there was a simple text search of urls and content to find logged requests we want to tweak or rerun. Less important we w...

Chrome is going to start sending out random TLS extensions to blow up buggy servers. Fiddler should add the reserved values to the automatic classifier that runs on each HTTPS handshake. https://tools.ietf.org/html/draft-davidben-tls-grease-01

If the Server returns a Set-Cookie header with a cookie value > 4K in length, the linter (severity M) should warn the user that the browser is unlikely to accept the cookie. This should be a line or two of code using the existing lint architect...

If I am right, fiddler use a root certificate to directly issue certificates to websites. I earlier had a problem using Fiddler with an application. If I understood the problem correctly, the application was specifically checking if the server cer...

During debugging process if I choose "302 redirect" in combo box, I think it will be awesome if it ask to fill the important field (redirect location) through a message box/dialog.

So while debugging, sometime I need to select many requests and run all of them to completion. I think there can be two options in a sub menu of right click menu of table. A) Break on response B) Run to completion

My English is not good,Please forgive me!

I came across an article describing how Wireshark is able to decrypt SSL encrypted network traffic by making use of a feature in Mozilla Firefox and Google Chrome: If a system environment variable named SSLKEYLOGFILE is set to a valid filename, th...