Each Session object in Fiddler contains a collection of string flags, in the Session.oFlags[] collection. The flags control how the session is processed and displayed in the Fiddler [Web Session List][4]. Flags can be set by FiddlerScript or an IFiddlerExtension.
Using SessionFlags
-
Flag names are not case-sensitive.
-
Flag values are always strings.
-
If you examine oFlags["non-existent-flag"], the result will be null.
-
The oFlags collection is the "indexer" for the Session object, so oSession.oFlags["flagname"] can be written as:
- oSession["flagname"] or
- oSession["SESSION", "flagname"]
-
You can remove a flag from the list by:
- Calling: oFlags.Remove("flagname") or
- Setting oSession["flagname"] = null
-
The value of most flags is not important; simply adding the flag is enough. So oSession["ui-hide"]="no" does the same thing as oSession["ui-hide"] = "true" (hides the session).
-
While you can call oFlags.Add("flagname"), this will throw an exception if the flag already exists. It's better to just set the value:oFlags["flagname"] = "value";
-
You can create new flags that attach metadata to a given session. To avoid naming conflicts, it's recommended that you choose distinctive flagnames. For example: addon.acme.loggingFlag.
UI Flags
ui-hide
Hide the session from the Session List.
- The session will continue to run.
- Breakpoints on hidden sessions are ignored.
- Note: hiding a session will free up the memory that would otherwise be used to hold the session data in memory.
ui-color
The value of this flag determines the font color used to render this session in the Session List.
ui-backcolor
The value of this flag determines the background color used behind this session's entry in the Session List.
ui-bold
If present, this session's entry will be bolded in the Session List.
ui-italic
If present, this session's entry will be italicized in the Session List.
ui-strikeout
If present, this session's entry will be struck out in the Session List.
ui-customcolumn
The value of this flag is shown in the Fiddler Session List's "User-defined" column.
ui-comments
The Comment, if any, which the user set on this session.
Breakpoint Flags
ui-breakrequest
If present, execution of this session will pause before the request is issued.
ui-breakresponse
If present, execution of this session will pause after the response is received.
Host Flags
x-overrideHost
Provide the Host:Port combination which should be used for DNS resolution purposes. Note that this mechanism does not change the HOST header on the request, and thus is not useful if there's an upstream gateway.
x-hostIP
Read-only. Indicates the IP address of the server used for this request.
x-overrideGateway
Provide the Host:Port combination of a gateway that should be used to proxy this request, or DIRECT to send the request directly to the origin server.
Client Flags
x-ProcessInfo
Information (module name and ProcessID) on source of local requests. Requires Fiddler v2.1.4.1 or later.
x-clientIP
Read-only. Indicates the client IP that sent this request. Mostly useful when multiple computers on a network are pointed to a single Fiddler instance.
x-clientport
Read-only. Indicates the port on the client that sent this request.
Socket Reuse Flags
x-serversocket
Read-only. String containing data about the reuse status of the server socket.
x-securepipe
Read-only. String containing data about the reuse status of a secure server socket.
Decryption and Authentication Flags
x-no-decrypt
If set on a CONNECT tunnel, the traffic in the tunnel will not be decrypted. Requires Fiddler v2.0.8.9 or later.
https-Client-Certificate
Filename of client certificate (e.g. .CER) that should be attached to this secure request. Requires Fiddler v2.1.0.3 or later.
x-OverrideCertCN
String specifying the hostname that should appear in the CN field of this CONNECT tunnel's Fiddler-generated certificate.
x-SuppressProxySupportHeader
Prevent Fiddler from adding a "Proxy-Support: Session-Based-Authentication" header to HTTP/401 or HTTP/407 responses that request Negotiate or NTLM authentication. Requires Fiddler v2.1.4.2 or later.
Performance Flags
x-TTFB
Deprecated. Use oSession.Timer instead. Time to the first byte of the response, in milliseconds.
x-TTLB
Deprecated. Use oSession.Timer instead. Time to the last byte of the response, in milliseconds.
request-trickle delay
Milliseconds to delay each outbound kilobyte of request data.
response-trickle-delay
Milliseconds to delay each inbound kilobyte of response data.
AutoResponder Flags
x-replywithfile
The value of this flag is the name of a file in the Captures/Responses folder (or a fully-qualified filename) containing a HTTP response to return to the client rather than sending the request to the server.
x-repliedwithfile
Read-only. Contains the name of the file specified in x-replywithfile, after the automatic response was loaded.
Drop Sessions Flags
log-drop-request-body
Drop the request body from the session list after request is sent to the server. Useful for minimizing memory usage.
log-drop-response-body
Drop the request body from the session list after response is sent to the client. Useful for minimizing memory usage.