4

I'm testing an internal web application that pulls content from servers that I'd rather leave 100% alone, and some of them send the "X-Frame-Options" header. While that's the right setting in production, while we're testing, I'd like to strip it out on just our browsers.

Is that possible? Googling turned up nothing.

Dave
  • 220
  • 1
  • 2
  • 6

3 Answers3

3

You could put an intermediary proxy like WebScarab in the middle. It'll allow you to rewrite responses on the fly so you should be able to strip that header out.

squillman
  • 37,618
  • 10
  • 90
  • 145
  • That's close to what I'm doing, I'm just running everything through Fiddler2 and looking at it there. For the small amount of traffic I need to test it works fine. – Dave Apr 07 '11 at 20:55
0

A Firefox extension allows to do that: See "Ignore X-Frame-Options Header" on addons.mozilla.org

roneo.org
  • 1
0

I've created an add-in for Firefox which ignores all x-frame options, see https://addons.mozilla.org/en-US/firefox/addon/ignore-x-frame-options/

Also see https://stackoverflow.com/questions/12881789/disable-x-frame-option-on-client-side/31391703

Community
  • 1
René Houkema
  • 111