Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
Source code for "Ignore X-Frame headers" chrome extension; see https://chrome.google.com/webstore/detail/ignore-x-frame-headers/gleekbfjekiniecknbkamfmkohkpodhe
chrome.webRequest.onHeadersReceived.addListener(
function (details) {
for (var i = 0; i < details.responseHeaders.length; ++i) {
if (details.responseHeaders[i].name.toLowerCase() == 'x-frame-options') {
details.responseHeaders.splice(i, 1);
return {
responseHeaders: details.responseHeaders
};
}
}
}, {
urls: ["<all_urls>"]
}, ["blocking", "responseHeaders"]);
{
"background": {
"scripts": [ "background.js" ]
},
"description": "Drops X-Frame-Options HTTP response headers, allowing all pages to be iframed.",
"key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDysh7qP/8H9qUMb0R9BZbk2NDirtNgRyo9AEh9C5HFcoMELEzJ/M/sCqn/yDM/Z7GK3t+w02zCeTBknLEUwgFL9kRxVV4s1kfgbijVHTSJkII6OjqiWDPkDeyMJ1oOr156Rct2bp2MAwOf0Tk1bm2UdwNbJxoE5sQFd2Hbu+WFxQIDAQAB",
"manifest_version": 2,
"name": "Ignore X-Frame headers",
"permissions": [ "webRequest", "webRequestBlocking", "\u003Call_urls>" ],
"update_url": "http://clients2.google.com/service/update2/crx",
"version": "1.0"
}
@lpolawski
Copy link

lpolawski commented Nov 18, 2020

Hi I have a question about your implementation
is a chance that your code will be work when i run scripts via : npm run "scripts" command
it will automatically add ignore addon ?

Regards

@chaptergy
Copy link

chaptergy commented Jan 19, 2021

For me this no longer works since new permissions were added sometime in chrome. I have created an extension with the new permissions and some more things: https://github.com/chaptergy/webextension-allow-sso-iframes

@guilryder
Copy link

guilryder commented May 6, 2021

Recommendations as the "Ignore X-Frame headers" Chrome extension author:

@Mkawad
Copy link

Mkawad commented May 7, 2021

Hi all, i'm trying to config a new project with cypress and everything was good until i faced an issue which is :
every time i try to hit a url via cy.visit it stop with an error displayed as 404 even though the url is right
i read about this issue and kind of an issue with same origin policy i'm not sure
can anyone help me please with this issue ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment