Chrome Web StoreNo malware found
In code review (v1.1.2)
Our reviewer read version 1.1.2 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.
5 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Ignore X-Frame headers, used by 100,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites. It comes from a trusted publisher and was last updated in November 2023.
Analyst notes
The extension's sole functionality is to strip X-Frame-Options and Content-Security-Policy headers from responses, which matches its stated purpose as a developer tool. The code is minimal, open-source, and contains no network requests, data collection, or obfuscation. The required permissions (webRequest, webRequestBlocking, <all_urls>) are essential for modifying headers and do not indicate malicious intent. The ML risk score is low, but the risk-engine flagged the permissions as critical, which is a common false positive for legitimate header-modifying extensions. The publisher is trusted with a valid Google badge and no other malicious extensions.
Ignore X-Frame headers Chrome extension security report
ID: gleekbfjekiniecknbkamfmkohkpodhe
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Guillaume Ryder
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
Screenshots & videos
Install growth
5 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Drops X-Frame-Options and Content-Security-Policy HTTP response headers, allowing all pages to be iframed.
Read the publisher’s full description
Should be used only temporarily and only for development, testing, or troubleshooting purposes because it disables important browser security mechanisms. Use at your own risk. No custom options or installation instructions: just install the extension and enable it on the relevant websites using the standard browser controls. Reference: * https://developer.mozilla.org/docs/Web/HTTP/Headers/X-Frame-Options * https://developer.mozilla.org/docs/Web/HTTP/Headers/Content-Security-Policy Source code: https://github.com/guilryder/chrome-extensions/tree/main/xframe_ignore Release notes: v2.0.0: reimplemented with declarativeNetRequest and Manifest V3, no functional change v1.2.2: Chrome 89 permission fix v1.1.1: added icons
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
No network indicators were extracted from this version.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from Guillaume Ryder
- URL in title10,000 users
- Apps in new tab324 users
Popular in Developer Tools
- GoFullPage - Full Page Screen Capture11,000,000 users
- touchenex 확장8,000,000 users
- TrendAI™ Toolbar for Enterprise7,000,000 users
- SentinelOne6,000,000 users
- React Developer Tools5,000,000 users