.har QA Fixtures DevTools, Captures & Bundles CC0 Public Domain · CI/CD Safe

Sample .har (HAR) Test Files & Edge Cases

Deterministic HTTP Archive v1.2 Capture fixtures engineered for automated unit tests, parser fuzzing, and upload validation pipelines. Pull directly in GitHub Actions with immutable SHA-256 verification.

minimalexpect: valid

minimal.har

Sanitized single-entry HAR 1.2 JSON capture with timing metrics and zero sensitive headers.

↓ Download (1.6 KB)

SHA-256: be133a81b716a13a5d522aadc458e221ba61a151794f62ca0747f8457040a3ec

Exact: 1,642 bytes

curl -fsSL https://fileformat.co/fixtures/v1/har/minimal.har -o minimal.har \
  && echo "be133a81b716a13a5d522aadc458e221ba61a151794f62ca0747f8457040a3ec  minimal.har" | shasum -a 256 -c

realisticexpect: valid

api-trace.har

Multi-entry HAR 1.2 waterfall: session GET, inference POST with postData.params, job poll, metrics GET, cache DELETE — distinct bytes from minimal.har.

↓ Download (7.0 KB)

SHA-256: cc221c9784a6a58ffc8b3a3a15659372cc8d7bfb1fe530b3ff5983a9f681c972

Exact: 7,212 bytes

curl -fsSL https://fileformat.co/fixtures/v1/har/api-trace.har -o api-trace.har \
  && echo "cc221c9784a6a58ffc8b3a3a15659372cc8d7bfb1fe530b3ff5983a9f681c972  api-trace.har" | shasum -a 256 -c

edge-caseCanary Auth & Cookie Leakexpect: valid

edge-case-auth-leak.har

Designed to test HAR credential scrubbers: inert BENIGN_CANARY tokens in headers, cookies, query params AND the JSON response body (access_token/refresh_token).

↓ Download (2.1 KB)

SHA-256: d39ab47406fe2557509be31ef0eff1c5d38ad506abcfa2043c3bca836931c290

Exact: 2,170 bytes

curl -fsSL https://fileformat.co/fixtures/v1/har/edge-case-auth-leak.har -o edge-case-auth-leak.har \
  && echo "d39ab47406fe2557509be31ef0eff1c5d38ad506abcfa2043c3bca836931c290  edge-case-auth-leak.har" | shasum -a 256 -c

Safe-by-Design Client-Side Synthesizer

In-Browser Edge-Case & Malformed Fixture Mutator

Zero Upload · Generated in RAM

Need negative test fixtures for parser fuzzing or upload gateway validation? Mutate minimal.har directly in your browser without hosting unsafe payloads on public URLs.

1. Base Input Source

Default Fixture: minimal.har

2. Select Mutation Operator

Tests graceful EOF / footer corruption handling without process panic or OOM.