Ignore X-Frame headers

by Guillaume Ryder

Developer tools x-frame headers iframes developer security testing troubleshooting browser-feature

Ignore X-Frame headers

by Guillaume Ryder

Developer tools x-frame headers iframes developer security testing troubleshooting browser-feature

Quick Look

This extension temporarily disables security headers to allow pages to be iframed during development or testing.

AI Overview

Who is this for?

Developers and testers who need to embed web pages in iframes.

Key Features

→ Removes X-Frame-Options headers
→ Removes Content-Security-Policy headers
→ Allows pages to be iframed
→ Temporary use for development/testing
→ Manifest V3 compatible

Reviews Analysis

Overall Sentiment

Mostly Positive

Users find the extension useful for its intended purpose of allowing iframe embedding, though acknowledge the security risks.

Note: AI analysis focuses on the substance and recency of reviews, which may differ from the overall store rating.

What Users Love

✓ Effectively allows pages to be iframed.
✓ Useful for development and testing.
✓ Simple to use without complex configuration.

Points to Consider

× Disables important security mechanisms.
× Users must be aware of and accept the risks.

Official Description

From the Developer

Drops X-Frame-Options and Content-Security-Policy HTTP response headers, allowing all pages to be iframed.

Should be used only temporarily and only for development, testing, or troubleshooting purposes because it disables important browser security mechanisms. Use at your own risk.

No custom options or installation instructions: just install the extension and enable it on the relevant websites using the standard browser controls.

Reference: * https://developer.mozilla.org/docs/Web/HTTP/Headers/X-Frame-Options * https://developer.mozilla.org/docs/Web/HTTP/Headers/Content-Security-Policy

Source code: https://github.com/guilryder/chrome-extensions/tree/main/xframe_ignore

Release notes: v2.0.0: reimplemented with declarativeNetRequest and Manifest V3, no functional change v1.2.2: Chrome 89 permission fix v1.1.1: added icons

Your extension? Let us know if we can update or correct anything!