Allow websites with XSS and CSP protection to be safely iframed in Trialfire
Trialfire Iframe Enabler Extension
This extension should be installed by Trialfire users who's website or web-app makes use of X-Frame-Options or Content-Security-Policy (CSP) headers.
Trialfire embeds your website in an iframe so you can run reports using elements of your site. If you are currently serving X-Frame-Options or Content-Security-Policy (CSP) headers which prevent Trialfire from iframing your website, you need install this extension which will bypass those headers on the app.trialfire.com domain.
This extension does not handle, collect or transmit user data or sensitive data.
Read more
Trialfire embeds your website in an iframe so you can run reports using elements of your site. If you are currently serving X-Frame-Options or Content-Security-Policy (CSP) headers which prevent Trialfire from iframing your website, you need install this extension which will bypass those headers on the app.trialfire.com domain.
This extension does not handle, collect or transmit user data or sensitive data.
Source Manifest.json
{"update_url": "https://clients2.google.com/service/update2/crx", "manifest_version": 2, "name": "Trialfire Iframe Enabler", "description": "Allow websites with XSS and CSP protection to be safely iframed in Trialfire", "version": "1.2.6", "icons": { "128": "trialfire.png" }, "author": "Trialfire", "permissions": [ "tabs", "webNavigation", "webRequest", "webRequestBlocking", "" ], "background": { "scripts": [ "trialfire.js" ] }}
Read more