UnXSS
UnXSS
Extension stats
- storage
- webRequest
- webRequestBlocking
- *://*/*
Other platforms
Extension summary
Modify or delete websites' security headers on the fly.
• If you want to load a website in an iframe, and that website uses "X-Frame-Options: SAMEORIGIN", Chrome will refuse to show the website. Use the "Delete X-Frame-Options header" option to have Chrome ignore that restriction.
• If you want to call a foreign AJAX endpoint from a website that has "Content-Security-Policy: ..." set to disallow wildcard script-src, use the "Delete Content-Security-Policy header" to allow running any script on that page.
• If you want to call out to an API endpoint that doesn't specify itself as CORS-friendly, enable the "Add Access-Control-Allow-Origin: * header" and "Add Access-Control-Allow-Methods: * header" options.
Each restriction can be disabled or enabled individually, and a list of checkboxes on the configuration page clearly indicates which restrictions are disabled.
Source code: https://github.com/chbrown/chrome-unxss
User reviews
唐雪见, 2020-09-02 Extension safety
Risk impact
UnXSS requires some sensitive permissions that could impact your browser and data security. Exercise caution before installing.
Risk likelihood
UnXSS may not be trust-worthy. Avoid installing if possible unless you really trust this publisher.
Promo images
Similar extensions
Here are some Chrome extensions that are similar to UnXSS:
N/A
5.00
5.00
5.00
3.67
5.00
4.22
4.92
4.33
4.00
4.39
3.71
3.80
4.89
N/A
5.00
N/A
3.81