TulipLot Companion

Strips frame-blocking headers for dashboard frames on tuliplot.com so your chosen sites load inside your TulipLot grid.

TulipLot (https://tuliplot.com) is a personal dashboard that shows the sites you choose in a grid of live frames. Many sites send headers (X-Frame-Options, Content-Security-Policy) that tell the browser not to display them inside frames, so those cells stay blank. TulipLot Companion fixes exactly that, and nothing else. It uses Chrome's declarativeNetRequest API to remove those two response headers — but only for sub-frame requests embedded by the TulipLot dashboard, and only for sites where you have explicitly granted access. HOW IT WORKS • You add a site to your TulipLot grid. • If the site refuses to load in a frame, TulipLot shows an "Enable for this site" button. • Clicking it asks Chrome for permission for that one site. Nothing is granted up front. • Once granted, the frame-blocking headers are removed for that site's frames inside TulipLot only. Ordinary browsing of the same site in normal tabs is completely unaffected. WHAT IT NEVER DOES • It never reads or changes page content, cookies, form data, or browsing history. • It never runs on pages other than tuliplot.com and localhost (where a tiny script lets the dashboard — or a local development copy of it — detect that the extension is installed). • It never strips headers for frames that are not embedded by the TulipLot dashboard or a local development copy of it. • It collects no data at all — nothing is stored, transmitted, or shared.