Item logo image for Lumina X-Frame Bypass Pro

Lumina X-Frame Bypass Pro

ExtensionDeveloper Tools13 users
Item media 2 (screenshot) for Lumina X-Frame Bypass Pro
Item media 1 (screenshot) for Lumina X-Frame Bypass Pro
Item media 2 (screenshot) for Lumina X-Frame Bypass Pro
Item media 1 (screenshot) for Lumina X-Frame Bypass Pro
Item media 1 (screenshot) for Lumina X-Frame Bypass Pro
Item media 2 (screenshot) for Lumina X-Frame Bypass Pro

Overview

Smartly analyze and bypass X-Frame-Options and CSP headers to allow iframing of any website on-demand.

Lumina X-Frame Bypass Pro - The Ultimate Iframe Enabler Tired of seeing the "Refused to display in a frame" error? Lumina X-Frame Bypass Pro is a robust, developer-first extension designed to intelligently bypass both X-Frame-Options and Content-Security-Policy (CSP) response headers, allowing you to embed and test any website inside an <iframe>, <embed>, or <object> instantly. Designed specifically for web developers, testers, and UI/UX designers, this tool removes modern cross-origin iframe restrictions locally so you can seamlessly test split-screen layouts, integrate third-party widgets in a sandbox, or analyze responsive designs on your local machine. šŸš€ CORE FEATURES: Global Override Mode: A single switch to strip blocking headers across all tabs and URLs temporarily. Precision Domain Bypassing: Only want to test a specific integration? Target specific domains to keep your broader browsing session 100% secure. Manifest V3 Architecture: Built entirely on Chrome's latest declarativeNetRequest APIs. This guarantees lightning-fast network interception with zero performance throttling. Universal Unblock: Successfully handles strict X-Frame-Options: DENY / SAMEORIGIN and Content-Security-Policy: frame-ancestors rules. Zero Configuration: No complex regex or JSON rules to write. Just click the toggle icon and start embedding. šŸ›”ļø PRIVACY & SECURITY FIRST: This extension runs entirely 100% offline. No user data is collected, no analytics are tracked, and no telemetry is sent to third-party servers. Disclaimer: Disabling iframe protection removes essential anti-clickjacking security mechanisms. Please use this tool temporarily for development and testing purposes only.

0 out of 5No ratings

Learn more about results and reviews.

Details

  • Version
    1.0.0
  • Updated
    April 13, 2026
  • Offered by
    Mochi Studio
  • Size
    482KiB
  • Languages
    English
  • Developer
    Email
    thangnd520@gmail.com
  • Non-trader
    This developer has not identified itself as a trader. For consumers in the European Union, please note that consumer rights do not apply to contracts between you and this developer.

Privacy

Manage extensions and learn how they're being used in your organization
The developer has disclosed that it will not collect or use your data. To learn more, see the developerā€™s privacy policy.

This developer declares that your data is

  • Not being sold to third parties, outside of the approved use cases
  • Not being used or transferred for purposes that are unrelated to the item's core functionality
  • Not being used or transferred to determine creditworthiness or for lending purposes

Support

Related

Command & Code: Web Firewall

0.0

Block XSS, SQL injection, and trackers with real-time analytics. Privacy-first local-only protection for secure browsing.

CSP Unblock

4.0

No more Content-Security-Policy limitations. This extension removes all CSP-related headers during website testing.

ignore-x-frame-options

4.4

ignore x-frame-options

CyberGuard: HTTP Security Header & Vulnerability Scanner

0.0

Scan HTTP security headers, identify missing protections like CSP, HSTS, and XSS prevention.

Iframe Buddy

0.0

Allow all iframes by dropping X-Frame-Options and Content-Security-Policy HTTP headers. Handy test button. Works with MV3 in 2024+!

NoobHeaders

5.0

Simple, local-first HTTP header modifier for developers and noobs. No ads, no tracking.

CORS Unblock

1.0

Unblocks CORS restrictions on websites.

Network Request Capturer Pro

5.0

Professional network debugging tool. Capture, analyze and export HTTP requests with advanced filtering.

CORS Bypass ā€” Per-Site CORS Unblock

0.0

Bypass CORS errors per-site with one click. Zero CPU overhead, smart domain protection. Built for developers.

Framer - Make IFrames possible!

5.0

Drop X-Frame-Options and Content-Security-Policy HTTP response headers for special sites, allowing pages to be embedded as iframes.

Anti-CORS, anti-CSP

4.1

Enable cross origin requests blocked by CORS or CSP. Disable CORS and CSP in selected hostnames, preserve security of other websites

XSSassin - Web Security Payload Injector

5.0

Security testing: inject payloads into input fields. XSS, SQLi, optional Smart-Injection (heuristic category) and more.

Command & Code: Web Firewall

0.0

Block XSS, SQL injection, and trackers with real-time analytics. Privacy-first local-only protection for secure browsing.

CSP Unblock

4.0

No more Content-Security-Policy limitations. This extension removes all CSP-related headers during website testing.

ignore-x-frame-options

4.4

ignore x-frame-options

CyberGuard: HTTP Security Header & Vulnerability Scanner

0.0

Scan HTTP security headers, identify missing protections like CSP, HSTS, and XSS prevention.

Iframe Buddy

0.0

Allow all iframes by dropping X-Frame-Options and Content-Security-Policy HTTP headers. Handy test button. Works with MV3 in 2024+!

NoobHeaders

5.0

Simple, local-first HTTP header modifier for developers and noobs. No ads, no tracking.

CORS Unblock

1.0

Unblocks CORS restrictions on websites.

Network Request Capturer Pro

5.0

Professional network debugging tool. Capture, analyze and export HTTP requests with advanced filtering.

Google apps