Web 组件扩展 IFrame 以绕过 X-Frame-Options: deny/sameorigin
X-Frame-Bypass is a Web Component, specifically a Customized Built-in Element, which extends an IFrame to bypass the X-Frame-Options: deny/sameorigin response header. Normally such headers prevent embedding a web page in an `` element, but X-Frame-Bypass is using a CORS proxy to allow this.
(Optional) Include the Custom Elements with Built-in Extends polyfill for Safari:
Include the X-Frame-Bypass JS module:
Insert the X-Frame-Bypass Custom Element:
See the Hacker News using X-Frame-Bypass. Supported are current versions of Chrome and Firefox browsers. Edge and Safari do not support Customized Built-in Elements yet.
© 2019 Jerzy Głowacki under Apache License 2.0.
暂无开放 Issues，或尚未同步最近议题。