Sets whether or not the HTTP Headers of all requests should be scanned. Not just requests that send parameters, through the query or request body.