Set restricted headers

[eliihen]

It should be possible to set restricted headers like Origin. This could potentially be done by having the outgoing request be intercepted with the webRequest API blockingly, then setting the headers at that point.

See https://github.com/esphen/RESTED/blob/master/src/utils/requestInterceptors.js

[ranjan-purbey]

Origin is a forbidden header name and will be overwritten by the browser even if it is set manually.

[zefciu]

In this case, we should remove the Origin tag from the dropdown list and add a big fat warning if someone is trying to set this tag manually. I just spent too much time wondering what is happening.

[sendreams]

@ranjan-purbey the rester tool can be override the origin value. please support it, in fact server side intercepter may be stop the request.

[eliihen]

It's possible to set it by using the WebExtension webRequest API to modify the request as it is being sent. I believe RESTED does this at some level already.

I'm not actively maintaining this project at this time, but if anyone wants to make a PR for this I will merge it 😊