Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/niutech/x-frame-bypass

Web Component extending IFrame to bypass X-Frame-Options: deny/sameorigin
https://github.com/niutech/x-frame-bypass

custom-element iframe web-component x-frame-options

Last synced: about 1 month ago
JSON representation

Web Component extending IFrame to bypass X-Frame-Options: deny/sameorigin

Host: GitHub
URL: https://github.com/niutech/x-frame-bypass
Owner: niutech
License: apache-2.0
Created: 2019-01-07T04:08:58.000Z (almost 6 years ago)
Default Branch: master
Last Pushed: 2024-08-19T19:28:06.000Z (3 months ago)
Last Synced: 2024-10-01T03:01:17.009Z (about 1 month ago)
Topics: custom-element, iframe, web-component, x-frame-options
Language: JavaScript
Homepage: https://niutech.github.io/x-frame-bypass/
Size: 15.6 KB
Stars: 674
Watchers: 22
Forks: 268
Open Issues: 40
Metadata Files:
- Readme: README.md
- License: LICENSE

Awesome Lists containing this project

README

# X-Frame-Bypass

[![Published on webcomponents.org](https://img.shields.io/badge/webcomponents.org-published-blue.svg)](https://www.webcomponents.org/element/x-frame-bypass)

X-Frame-Bypass is a [Web Component](https://www.webcomponents.org/introduction), specifically a [Customized Built-in Element](https://html.spec.whatwg.org/multipage/custom-elements.html#custom-elements-customized-builtin-example), which extends an IFrame to bypass the [`X-Frame-Options: deny/sameorigin`](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options) response header. Normally such headers prevent embedding a web page in an `` element, but X-Frame-Bypass is using a CORS proxy to allow this.

## Usage

1. (Optional) Include the [Custom Elements with Built-in Extends polyfill](https://github.com/ungap/custom-elements-builtin) for Safari:

2. Include the X-Frame-Bypass JS module:

3. Insert the X-Frame-Bypass Custom Element:

## Demo

See the [Hacker News using X-Frame-Bypass](https://niutech.github.io/x-frame-bypass/). Supported are current versions of Chrome and Firefox browsers. Edge and Safari do not support Customized Built-in Elements yet.

## License