Skip to content

Instantly share code, notes, and snippets.

Forked from dergachev/background.js
Last active May 6, 2021 19:35
What would you like to do?
Source code for "Ignore X-Frame headers" chrome extension; see
function (details) {
return {
responseHeaders: details.responseHeaders.filter(function(header) {
return ( !== 'x-frame-options');
}, {
urls: ["<all_urls>"]
}, ["blocking", "responseHeaders"]);
"background": {
"scripts": [ "background.js" ]
"description": "Drops X-Frame-Options HTTP response headers, allowing all pages to be iframed.",
"key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDysh7qP/8H9qUMb0R9BZbk2NDirtNgRyo9AEh9C5HFcoMELEzJ/M/sCqn/yDM/Z7GK3t+w02zCeTBknLEUwgFL9kRxVV4s1kfgbijVHTSJkII6OjqiWDPkDeyMJ1oOr156Rct2bp2MAwOf0Tk1bm2UdwNbJxoE5sQFd2Hbu+WFxQIDAQAB",
"manifest_version": 2,
"name": "Ignore X-Frame headers",
"permissions": [ "webRequest", "webRequestBlocking", "\u003Call_urls>" ],
"update_url": "",
"version": "1.0"
Copy link

Hi, I was trying to implement same but could not do it. Is there any steps which I can follow and implement it?
Where do i add this code? (On page where iFrame tag implemented or the source page)

Many thanks in advance!

Copy link

Heads up there's a formatting error. "\u0003Call_urls" should be "<all_urls>"

Copy link

Hi Can i get a suggestion as how to use this into my code?

Copy link

mrharel commented Jun 5, 2019

This used to work but not anymore. Could it be that Chrome changed their security policy or API?

Copy link

Recommendations as the "Ignore X-Frame headers" Chrome extension author:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment