Web Component extending IFrame to bypass X-Frame-Options: deny/sameorigin
-
Updated
Feb 11, 2026 - JavaScript
#
x-frame-options
Here are 21 public repositories matching this topic...
A lightweight JavaScript CORS Reverse Proxy designed to run in a Cloudflare Worker.
nodejs javascript fetch xmlhttprequest cors reverse-proxy cloudflare iframe cors-proxy same-origin-policy fetch-api cross-site x-frame-options access-control-allow-origin cloudflare-worker cloudflare-workers cors-proxy-serverless
-
Updated
Sep 13, 2020 - JavaScript
NGINX Module for sending security headers
-
Updated
Jun 13, 2026 - C
x-frame-options bypass
-
Updated
Nov 18, 2024 - JavaScript
Websites constantly steal content by iFraming, Unbed stops it in it's tracks.
open-source self-hosted embed iframe embedding x-frame-options iframe-protection embed-blocker iframe-blocker unbed unframed embed-prevention iframe-prevention embed-protection protect-iframe block-embed block-iframe
-
Updated
Jan 7, 2023
Build Iframe. Ignore X-Frame-Options, Content-Security-Policy, X-Content-Type-Options, X-Xss-Protection etc.
security protection content-security-policy iframe iframe-api security-policy x-frame-options x-content-security-policy x-content-type-options
-
Updated
Dec 4, 2022 - JavaScript
Remastered web component extending iFrame to bypass X-Frame-Options: deny/sameorigin
cors iframe iframe-embeds cors-proxy xframe cors-headers x-frame-options xframe-manipulation iframe-manipulation
-
Updated
Mar 8, 2026 - JavaScript
The Clickjacking Exploit Detector uses webpage scanning techniques to identify potential vulnerabilities and provide analysis of those elements.
python content-security-policy web-security clickjacking x-frame-options python-27 web-exploit python-security-tools
-
Updated
May 30, 2026 - Python
View two sites or two dev servers side by side in one browser window. Sites that block iframes load through a built-in header-stripping proxy.
nodejs cli web-development proxy comparison side-by-side dev-server developer-tools iframe localhost split-view x-frame-options
-
Updated
Sep 17, 2026 - JavaScript
A set of Asp.Net Core middlewares for adding security headers to ASP.NET Core web apps.
security referrer-policy content-security-policy asp-net-core public-key-pinning expect-ct x-frame-options security-headers feature-policy x-xss-protection strict-transport-security x-content-type-options
-
Updated
Mar 11, 2019 - C#
Burp Suite extension for discovering, analyzing, and auditing HTTP security headers including CSP, HSTS, CORS, and web security misconfigurations.
cors csp hsts referrer-policy security-audit penetration-testing web-security cross-origin cross-origin-resource-sharing burp-extensions x-frame-options http-headers security-headers x-content-type-options burp-suite security-headers-scanner web-security-audit http-headers-scanner
-
Updated
Aug 21, 2026 - Java
CJChecker is a small command-line tool that checks web applications for basic Clickjacking protection by analyzing HTTP response headers.
python csp bug-bounty web-security pentesting clickjacking cli-tool security-research defensive-security x-frame-options http-headers security-headers vulnerability-checker lightweight-tool header-analysis concurrent-scanning bulk-scanning passive-analysis
-
Updated
Mar 27, 2026 - Python
Clickjacking automation tool.
-
Updated
Nov 6, 2022 - Python
Vue directive to bypass X-Frame-Options deny/sameorigin response headers
-
Updated
Oct 12, 2020 - JavaScript
Audit a URL's HTTP security headers (HSTS, CSP, X-Frame-Options, ...) with a letter grade — runs locally, zero dependencies
cli http security csp hsts audit content-security-policy headers x-frame-options http-headers security-headers zero-dependencies header-audit securityheaders-alternative
-
Updated
Jun 25, 2026 - JavaScript
Herramienta de auditoria defensiva para detectar vulnerabilidades de clickjacking
react nodejs security csp security-audit owasp web-security clickjacking defensive-security x-frame-options
-
Updated
Apr 20, 2026 - JavaScript
Serverless CF Reverse Proxy to bypass same-origin limitations
nodejs javascript fetch cors reverse-proxy cloudflare iframe cors-proxy same-origin-policy fetch-api cross-site x-frame-options access-control-allow-origin cloudflare-worker cors-proxy-serverless
-
Updated
Jun 12, 2026 - JavaScript
This scripts will help you to find out vulnerable and outdated libraries from the application also there is script to find out http response headers.
python bootstrap jquery cors security automation content-security-policy vulnerability appsec security-tools x-frame-options http-headers outdated-libraries x-xss-protection strict-transport-security automation-tool outdated-version
-
Updated
Sep 28, 2025 - Python
Add this topic to your repo
To associate your repository with the x-frame-options topic, visit your repo's landing page and select "manage topics."