snapshot of https://github.com/mattermost/mattermost.git (master, 2026-09-16; blobs > 131072B omitted)

e2e-tests/cypress/tests/extensions/Ignore-X-Frame-headers/background.js

@@ -0,0 +1,21 @@
+/* eslint-disable headers/header-format */
+
+// taken from https://github.com/guilryder/chrome-extensions/tree/master/xframe_ignore
+
+/*global chrome*/
+
+const HEADERS_TO_STRIP_LOWERCASE = [
+    'content-security-policy',
+    'x-frame-options',
+];
+
+chrome.webRequest.onHeadersReceived.addListener(
+    (details) => {
+        return {
+            responseHeaders: details.responseHeaders.filter((header) => {
+                return HEADERS_TO_STRIP_LOWERCASE.indexOf(header.name.toLowerCase()) < 0;
+            }),
+        };
+    }, {
+        urls: ['<all_urls>'],
+    }, ['blocking', 'responseHeaders']);

e2e-tests/cypress/tests/extensions/Ignore-X-Frame-headers/manifest.json

@@ -0,0 +1,17 @@
+{
+  "update_url": "https://clients2.google.com/service/update2/crx",
+  "manifest_version": 2,
+  "name": "Ignore X-Frame headers",
+  "description": "Drops X-Frame-Options and Content-Security-Policy HTTP response headers, allowing all pages to be iframed.",
+  "version": "1.1",
+  "background": {
+    "scripts": [
+      "background.js"
+    ]
+  },
+  "permissions": [
+    "webRequest",
+    "webRequestBlocking",
+    "<all_urls>"
+  ]
+}