Chrome ?? ????? X-Frame-Options ??? ?? ?? ??

? ?? ?????? X-Frame-Options ??? ?????. iframe ?? ? ??? ??? ???? ??? ? ?? ?? ??? ???? ??? ???? ? ??? ??? ???. ??? Chrome ?? ????? ?? ? ?? ??? ??? ?? iframe? ???? ?? ????? ??? ?????.

??? ?? ???? ? ??? ? ???? iframe?? ?? ?? iframe ??? ????? ??? Intab???. ? ?. ??? X-Frame-Options DENY ?? SAMEORIGIN ??? ???? ????? ??? ?? Intab? ?? ??? ??? ?? ???? ??? ?? ????? ?? ? ????.

??? ??? ???? ??? ??? ????? ??? ??????. ???? ?? ??. Chrome ?? ????? ? ??? ???? ? ??? ? ? ?? ??? ???? ?? ??? ?? ???? ?????.

webRequest API

??? ?? ?? ? ??? Chrome?? ???? webRequest API? ???? ????. . ? API? ???? ??? HTTP ??? ???? ??? ? ?? X-Frame-Options ??? ?? ?? ??? ???? ??? ?????. ?? ????? ??? ????? ?????? DENY ?? SAMEORIGIN ??? ???? iframe ??? ???? ??? ??? ? ????.

?? ?? ??? webRequest API? ???? ?? ???? ??? ?????.

chrome.webRequest.onHeadersReceived.addListener(
    function(info) {
        var headers = info.responseHeaders;
        for (var i=headers.length-1; i >= 0; --i) {
            var header = headers[i].name.toLowerCase();
            if (header == 'x-frame-options' || header == 'frame-options') {
                headers.splice(i, 1); // Remove header
            }
        }
        return {responseHeaders: headers};
    }, {
        urls: [
            '*://*/*', // Pattern to match all http(s) pages
            // '*://*.example.org/*', // Pattern to match one http(s) site
        ], 
        types: [ 'sub_frame' ]
    }, [
        'blocking',
        'responseHeaders',
        // Modern Chrome needs 'extraHeaders' to see and change this header,
        // so the following code evaluates to 'extraHeaders' only in modern Chrome.
        chrome.webRequest.OnHeadersReceivedOptions.EXTRA_HEADERS,
    ].filter(Boolean)
);

?? ??

In webRequest API? ????? ?? ????? ??????? ??? ??? ???? ???.

"permissions": [
    "webRequest",
    "webRequestBlocking",
    "urls": [
        "*://*/*" // Pattern to match all http(s) pages
    ]
]

? ?? ??? X-Frame-Options DENY ?? SAMEORIGIN ??? ???? ?? ?? ??? ???? ???? Intab? ?? Chrome ?? ????? ???? ???? ??? ?????? ??? ??? ??? ?????.

? ??? Chrome ?? ????? X-Frame-Options DENY ??? ??? ??? ? ????? ?? ?????. ??? ??? PHP ??? ????? ?? ?? ??? ?????!