Is ignore-x-frame-options safe?

Low risk

ignore-x-frame-options removes X-Frame-Options and Content-Security-Policy headers from every page and frame response.

The extension installs a declarativeNetRequest rule that applies to all URLs for top-level pages and embedded frames. When those responses load, it strips both X-Frame-Options and Content-Security-Policy before Chrome enforces them.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

17Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Block and redirect the requests your browser makes

    declarativeNetRequest

Updated 30 September 2026ammjifkhlacaphegobaekhnapdjmeclo