package.json

{
  "name": "xframeserver",
  "version": "1.0.0",
  "description": "",
  "main": "index.js",
  "scripts": {
    "test": "echo \"Error: no test specified\" && exit 1"
  },
  "author": "",
  "license": "ISC",
  "dependencies": {
    "hapi": "^16.6.2",
    "inert": "4.x.x",
    "vision": "4.x.x"
  }
}

server.js

const Hapi = require('hapi');
const vision = require('vision');
const inert = require('inert');
const server = new Hapi.Server();

server.connection({
  port: 3333,
  routes: {
    cors: true,
  },
})

async function startProxy() {
  try {
    await server.register([vision, inert]);

    server.route({
      method: 'GET',
      path: '/{param*}',
      handler: {
        directory: {
          listing: true,
          // set path
          path: './'
        }
      }
    });
    server.ext('onPreResponse', (request, reply) => {
      request.response.header('X-Frame-Options', 'ALLOW-FROM http://localhost:3000');
      reply.continue();
    });

    await server.start();
    console.log('Server started at:', server.info.uri);
  } catch (error) {
    console.error(error);
  }
}
startProxy();