If X-Frame-Options is removed from the HTTP stream, the modified page can be displayed. Browser scripting or a 'Man in the middle' attack (on the content provider not the user) are possible approaches to working around the limitation.
Re:Show HN: Chrome UI built with web stack
by brudgers on Thursday January 12, 2017 @12:30PM
(#13384225)
I pointed it out for the sake of suggesting a work around. I'm a big fan of people taking control of their own browsers and I dislike that X_FRAME-OPTIONS is designed to prevent people from mashing up web content however they want.
Re:Show HN: Chrome UI built with web stack
by grzm on Thursday January 12, 2017 @07:54PM
(#13387568)
Likely because just "why?" can come off as flip rather than indicating actual interest. Text-only forums can make it hard to show where you're coming from with such a short response. Perhaps if you include a reason why you think it might be a bad idea, or speculate what might motivate their effort it would show your interest.
It is the browser that refuses to show the content. The behavior is in response to an HTTP header. See: http://stackoverflow.com/a/19843216
If X-Frame-Options is removed from the HTTP stream, the modified page can be displayed. Browser scripting or a 'Man in the middle' attack (on the content provider not the user) are possible approaches to working around the limitation.
I've updated README to clarify this.
https://github.com/pd4d10/chrome-ui/blob/master/README.md
https://news.ycombinator.com/item?id=13380228
I want to add 'Show HN' to the title. It is too late to edit it.
It is hard to say what the purpose is. At first I do this just for fun.
Maybe you could consider it as a trial to use CSS to simulate native UI, although not perfectly.
https://news.ycombinator.com/item?id=8381148
Two other factors I know of are:
- You can't downvote a response to a comment you posted
- You can't downvote comments after a certain interval (24 hours?)
-