HAR Sanitizer

Remove cookies, credentials, query values, bodies, server addresses and unsafe extensions from a HAR 1.2 file before sharing it.

Choose an uncompressed .har or .json file up to 1 GB. HAR files can contain active session secrets; upload only files you are authorized to process.

Safety and interpretation limits

Convertr validates and reads the uploaded JSON only. It never fetches or replays a recorded URL, resolves DNS, executes scripts, renders response bodies, creates cURL commands, or acts as a network proxy.

Browser timing fields can be missing, negative, cached, connection-reused, or vendor-specific. Summaries preserve those semantics and exclude unavailable phases from averages.

HAR Sanitizer

Remove configured secrets and sensitive request data from a validated HTTP Archive before sharing it.

Input
One valid .har file plus sanitization choices.
Output
A sanitized HAR and a manifest of removed or changed fields.
Real limitations
Sanitization follows deterministic rules and cannot recognize every organization-specific secret; always review the result before sharing.
Privacy and data handling
one valid .har file plus sanitization choices is uploaded to a compatible Convertr worker only after you start the operation. Processing is automated, and temporary source and result files are deleted automatically after processing rather than retained as permanent storage.

How to use this tool

  1. Choose one valid .har file plus sanitization choices and wait for the page to validate it.
  2. Set the available output or inspection options, then start processing.
  3. Review the reported result and download a sanitized HAR and a manifest of removed or changed fields before the temporary link expires.

Common failure modes

Invalid HAR JSON, unsafe extensions, unsupported shapes, or a file outside configured limits is rejected.

Useful example

Remove cookie values, Authorization headers, query values, bodies, and server addresses from a captured support HAR.