Corser

Corser WebExtension make it possible to:

• allows cross-domain request with sites which deny CORS in their headers
• allows embedding iframe of domain which restricts it by x-frame-options header

Usage of this extension is intended for people who understand what they want to achieve. Otherwise it may compromise your security.

Install from addons.mozilla.org

Usage

Imagine we want to allow of embedding some iframe page of domain which denies embedding it pages.
Then after installing in options page we must paste the following sample config

*://our-web-page-where-we-want-iframe-to-show.com/*
-
*://domain-which-restricts-iframe-usage.com/*

- is a separator between origin urls and match urls

Each URL must conform to Match Pattern

If you want another rule just separate it by double newline.

Developing

In order to use you must have web-ext binary installed and be familiar with it. All task are described in makefile

Changelog

0.0.15

• fix port escaping in rules. Now “domain:4949” should match

0.0.14…

there were dragons…