http.header — Header

name=value

In the console: Header

Matches any HTTP request header. Expressed in name=value format. For example, X-Api-Key=secret matches both the header name and its value.

Tip

To match only on header name, use contains X-My-Header. To match name and value together, use eq X-My-Header=myvalue.

Supported Operators

Operator	Description
==	Exact match
!=	Not equal
contains	Contains
not_contains	Does not contain

Examples

IF   http.header not_contains X-Api-Key
THEN block

IF   http.header contains Content-Type=application/json
THEN allow

Related

• http.cookie →
• http.user_agent →