2

The RSS reader I use has a feature to load the linked site in a frame. And has useful related features connecting that to navigation of feeds/items. But lots of sites now set x-frame-options which mean that they simply don't load, with no error message or any other indicator.

I trust that my RSS reader is in fact not trying to clickjack me. I want to enable it to frame any site, regardless of the x-frame-options they set.

Is there an about:config entry or an extension that would help here? Especially if I can specifically whitelist this domain, so that only frames it creates skip x-frame-options.

1

1 Answer 1

1

I ended up solving this by writing a quick extension using nsITraceableChannel to alter the response. Not the request.

0

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .