Growth signalNo paid features detectedHigh-risk permissions

iFrame Unlocker – Remove X-Frame-Options & CSP

This extension demonstrates a 'declarativeNetRequest' ruleset that blocks all requests to the domain 'example.com' on all frames.

Users344Current public install base

Rating5.0Store average score

Reviews1Public review volume

Manifest versionV3Extension platform version

7-day growth+35Net users gained this week

7-day growth rate+11.3%Relative weekly velocity

Preview

iFrame Unlocker – Remove X-Frame-Options & CSP Media preview

3 assets

Trend

User growth trend

Review user movement across collected snapshots.

User Growth Over Time

Rating trend

7-day rating trend

View collected rating snapshots from the latest 7-day window to assess rating stability.

7-day rating change

Start

5.00

Latest

5.00

7-day rating change

0.00

2026年7月15日2026年7月21日

Growth overview

Daily, weekly, and monthly growth

Compare 1-day, 7-day, and 30-day net growth and growth rate.

1-day growthGrowing

+14+4.24%

7-day growthGrowing

+35+11.3%

30-day growthGrowing

+44+14.7%

Technical snapshot

Version, languages, and crawl freshness

Review publication date, version, supported languages, and crawl timestamps.

Version1.0

ManifestV3

Size5.77KiB

Languages1English (United States)

Published--

Store updated--

Last crawled--

Overview

Product summary

Review the store description, core capabilities, and common use cases.

🛠️ What It Does:

This extension removes restrictive HTTP response headers such as:

- X-Frame-Options

- Content-Security-Policy

- X-Content-Type-Options

These headers often prevent websites from being embedded inside elements. By removing them, this extension allows you to embed otherwise blocked pages—useful for developers, researchers, or anyone building iframe-based tools.

Reviews

Recent review snapshot

Inspect the latest comments and rating distribution.

Store average score5.0Chrome Web Store aggregate rating, including ratings without synced review text

Synced text average--Average computed only from synced review bodies below

Reviews with text0Synced review bodies

Total ratings / reviews1Chrome Web Store public rating/review count

Store average score: 5.0. The bars below are calculated from synced review text only, so they may be empty for extensions that have public ratings but no synced comments yet.

5★

4★

3★

2★

1★

No synced review text is available yet.

Similar and related extensions

Review related products from the Chrome Web Store detail page.

Allow CSP: Content-Security-Policy

Developer Tools

Easily remove CSP (Content-Security-Policy) rules from the response header.

CSP Unblock

Developer Tools

No more Content-Security-Policy limitations. This extension removes all CSP-related headers during website testing.

ignore-x-frame-options

Developer Tools

ignore x-frame-options

Iframe QuickLink - Open Iframe URLs in a New Tab

Developer Tools

Simplify development: Open iframe URLs in a new tab instantly with Iframe QuickLink.

Anti-CORS, anti-CSP

Developer Tools

PaidConfidence 55

Enable cross origin requests blocked by CORS or CSP. Disable CORS and CSP in selected hostnames, preserve security of other websites

Allow X-Frame-Options

Developer Tools

Easily remove X-Frame-Options from the response header.

AI product read

Removes restrictive HTTP headers (X-Frame-Options, CSP, X-Content-Type-Options) to allow embedding websites in iframes.

Prevents websites from being embedded in iframes due to server-side security headers.

The extension uses the declarativeNetRequest API to intercept HTTP responses from all visited sites and remove specific security headers, thereby allowing those sites to be loaded inside iframe elements.

Target users: Web developers / Researchers / Users building iframe-based tools

The extension description in the manifest ('blocks all requests to example.com') contradicts the actual ruleset in rules_1.json (which modifies headers for all sites). The analysis is based on the actual code (rules_1.json).

Monetization

No paid features detected

The extension is a free utility with no code related to billing, subscriptions, or feature gating. The 'pro' keyword found in static analysis was a false positive from the Chrome Web Store verification metadata file.

Confidence: 100
Payment platform: --
Source: AI / High
Login required: No
Reason: The extension functions entirely locally via declarativeNetRequest rules. It does not implement any authentication logic, nor does it depend on a destination service that requires a user account. The privacy description confirms 'No tracking' and 'Everything works 100% locally'.

Permission risk

High-risk permissions

This estimate uses declared permissions and host permissions to assess access scope and sensitivity.

主机权限覆盖范围较宽

Publisher

mdmahfujarrahman

Independent publisher

Email: [email protected]
Phone: --
Address: --

Public contact fields are shown above. Developer portfolio pages are available on paid accounts.

View developer portfolio

Permissions

Host access