Show HN: Chrome UI built with web stack

Re:Show HN: Chrome UI built with web stack by brudgers on Thursday January 12, 2017 @11:21AM (#13383461)

Many websites like Google, Twitter or GitHub, refuse to show content in cross domain iframe, for secure reason.

It is the browser that refuses to show the content. The behavior is in response to an HTTP header. See: http://stackoverflow.com/a/19843216

If X-Frame-Options is removed from the HTTP stream, the modified page can be displayed. Browser scripting or a 'Man in the middle' attack (on the content provider not the user) are possible approaches to working around the limitation.

[ Parent | on HN ]

Re:Show HN: Chrome UI built with web stack by pd4d10 on Thursday January 12, 2017 @12:02PM (#13383921)

Thanks for your clarification.

I've updated README to clarify this.

https://github.com/pd4d10/chrome-ui/blob/master/README.md

[ Parent | on HN ]

Re:Show HN: Chrome UI built with web stack by brudgers on Thursday January 12, 2017 @12:30PM (#13384225)

I pointed it out for the sake of suggesting a work around. I'm a big fan of people taking control of their own browsers and I dislike that X_FRAME-OPTIONS is designed to prevent people from mashing up web content however they want.

[ Parent | on HN ]