Skip to content

Instantly share code, notes, and snippets.

What would you like to do?
Source code for "Ignore X-Frame headers" chrome extension; see
function (details) {
return {
responseHeaders: details.responseHeaders.filter(function(header) {
return ( !== 'x-frame-options');
}, {
urls: ["<all_urls>"]
}, ["blocking", "responseHeaders"]);
"background": {
"scripts": [ "background.js" ]
"description": "Drops X-Frame-Options HTTP response headers, allowing all pages to be iframed.",
"key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDysh7qP/8H9qUMb0R9BZbk2NDirtNgRyo9AEh9C5HFcoMELEzJ/M/sCqn/yDM/Z7GK3t+w02zCeTBknLEUwgFL9kRxVV4s1kfgbijVHTSJkII6OjqiWDPkDeyMJ1oOr156Rct2bp2MAwOf0Tk1bm2UdwNbJxoE5sQFd2Hbu+WFxQIDAQAB",
"manifest_version": 2,
"name": "Ignore X-Frame headers",
"permissions": [ "webRequest", "webRequestBlocking", "\u003Call_urls>" ],
"update_url": "",
"version": "1.0"
Copy link

KapildevPanchal commented Mar 15, 2016

Hi, I was trying to implement same but could not do it. Is there any steps which I can follow and implement it?
Where do i add this code? (On page where iFrame tag implemented or the source page)

Many thanks in advance!

Copy link

aakilfernandes commented Oct 18, 2018

Heads up there's a formatting error. "\u0003Call_urls" should be "<all_urls>"

Copy link

raicheljohn28 commented Mar 8, 2019

Hi Can i get a suggestion as how to use this into my code?

Copy link

mrharel commented Jun 5, 2019

This used to work but not anymore. Could it be that Chrome changed their security policy or API?

Copy link

guilryder commented May 6, 2021

Recommendations as the "Ignore X-Frame headers" Chrome extension author:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment