Detour

HTTP redirect and script injection rules for local testing

Detour is a Chromium extension for redirecting HTTP requests and injecting scripts during local development. Point an API at localhost, try a script on a live page, or strip a response header — without changing production. REDIRECT RULES • Send any URL to localhost, a staging host, or a mock endpoint • Use * in the pattern to capture path segments, then substitute them into the destination URL as $1, $2, and so on • Filter by HTTP method (GET, POST, …) when you need tighter control • Block telemetry or third-party scripts by rerouting them to an empty response SCRIPT INJECTION • Load external JavaScript into any page before the page's own code runs • Works on strict Content Security Policy (CSP) sites where inline scripts normally can't load — the extension injects with its own privileges, so CSP doesn't apply • Useful for dev overlays, tracing, or experimental bundles without rebuilding the host app ONE-CLICK HEADER OVERRIDES • Allow CORS • Disable Content Security Policy • Disable X-Frame-Options WORKFLOW DETAILS • Per-tab badge showing how many rules fired on the current page • One pattern language — just * for wildcards, $1 for captures. No "contains" or "equals" modes to learn. • Import and export rules as JSON. A public schema lets VS Code autocomplete the file. PRIVACY Everything runs in your browser. No account, no telemetry, no remote configuration. Rules stay on your machine until you export them.