Allow SSO iFrames

Drops and changes HTTP response headers to allow sso login pages to be iframed.

Allow SSO iFrames - Firefox Add-on

"Allow SSO iFrames" is a Firefox add-on that modifies HTTP headers to enable iframed SSO login pages. It is designed for development and testing purposes.

Add-on stats

By: chaptergy
Users: 8
Rating: 4.00
(1)
Version: 1.1 (Last updated: 2022-01-14)
Creation date: 2021-01-19
Weekly download count: 2
Firefox on Android: Yes
Risk impact: High risk impact
Risk likelihood:
Manifest version: 2
Permissions:
  • webRequest
  • webRequestBlocking
  • <all_urls>
Size: 23.85K

Other platforms

Not available on Chrome
Not available on Android
Not available on Edge
Want to check extension ranking and stats more quickly for other Firefox add-ons? Install Chrome-Stats extension to view Firefox-Stats data as you browse the Firefox Browser Add-ons.

Add-on summary

This plugin changes HTTP headers to allow websites to be iframed which block this. It is meant for development and testing purposes. It does the following:

  • Drop all 'x-frame-options' response headers
  • Drop all 'content-security-policy' response headers
  • Change all 'set-cookie' response headers to set 'SameSite=None' (this also requires the Secure flag to be set for the cookie)
  • Change 'sec-fetch-dest' request headers to 'document' if it equals 'iframe'
Note, that when cookies within this iframe are required, the iframe content has to be HTTPS, otherwise cookies will not be set.

Add-on safety

Risk impact

Allow SSO iFrames requires some sensitive permissions that could impact your browser and data security. Exercise caution before installing.

Risk likelihood

Allow SSO iFrames has earned a fairly good reputation and likely can be trusted.

Upgrade to see risk analysis details