JakubSECURITY / RESEARCH
← All write-ups

redact-request: share the shape of a request, never its contents

Print the shape of a captured HTTP request — method, path, header names, body structure — never the values. Share a request without sharing your session.

Sometimes you want to discuss a request — its structure, which headers it carries, the shape of its body — without revealing any of the values inside it.

redact-request prints exactly that: the skeleton of a captured HTTP request with the sensitive contents removed, so you can talk about it in public or paste it into a chat without exposing your session.

What it does

  • Shows the method, path and the names and structure of headers and body.
  • Omits the values — tokens, cookies and payloads stay private.
  • Fail-safe by design: it prints shape, so there is nothing sensitive to leak.

It is the tool for “here is roughly what the request looks like” when even a sanitized full request is more than you want to share.

View redact-request on GitHub