HTTP 响应头解析

UpBox优盒工具箱，免费 HTTP 响应头解析工具，整理状态码与头字段，检查 Set-Cookie 标记和 HSTS、CSP 等安全响应头。

无需注册 · 数据不上传No sign-up · nothing uploaded

原始响应头Raw response headers

状态码—

响应头数量0

Cookie 数

安全项0/6

粘贴响应头后自动解析

粘贴内容只在本地解析，不会发起真实请求

全部响应头All headers

粘贴响应头后自动解析

安全检查Security check

Cookie 标记Cookie flags

本工具所有运算在本地浏览器完成，你的文件、文本不会上传到服务器

工具介绍

HTTP 响应头解析把一段原始响应头整理成表格，识别状态行、重复字段和续行，并统计头数量与 Cookie 数。 The parser turns a raw response header block into a table, recognizes the status line, duplicate fields and folded lines, and counts headers and cookies.

同时检查 HSTS、CSP、X-Content-Type-Options、X-Frame-Options、Referrer-Policy、Permissions-Policy 六项常见安全头，并拆出 Set-Cookie 的 Secure、HttpOnly、SameSite 标记。 It also checks six common security headers — HSTS, CSP, nosniff, frame protection, referrer policy and permissions policy — and breaks out Set-Cookie flags such as Secure, HttpOnly and SameSite.

状态行识别Status line detection
重复头字段保留Keeps duplicate headers
Cookie 标记拆解Cookie flag breakdown
六项安全检查Six security checks
本地解析不请求Local-only parsing

使用说明

从浏览器开发者工具或 curl 复制原始响应头。Copy raw headers from devtools or curl.
粘贴到输入框，页面自动解析。Paste them in; parsing runs automatically.
核对状态码、头数量与字段值。Check the status, header count and values.
查看安全项评分与 Cookie 标记，定位缺失配置。Review the security score and cookie flags to spot missing settings.

常见问题

只贴 Name: Value 可以吗？Can I paste only Name: Value lines?

可以。没有状态行时状态码显示为 —，其余字段照常解析。Yes. Without a status line the status shows —, and all other fields still parse.

重复的响应头怎么处理？How are duplicate headers handled?

每个字段单独一行保留，不做合并，便于看清多次设置的值。Each occurrence stays on its own row rather than being merged, so repeated settings remain visible.

安全项评分代表什么？What does the security score mean?

六项常见安全头中已正确设置的数量。缺项只是提示，是否必须取决于站点类型。How many of six common security headers are correctly set. Missing ones are hints; requirements vary by site.

会帮我请求网址吗？Will it fetch the URL?

不会。工具只解析你粘贴的文本，不发起任何网络请求。No. It only parses the pasted text and makes no network request.