UnXSS
大小：0.23MiB版本：v 0.0.4更新时间：2015-01-10
Intercept and modify or delete websites' security headers
UnXSS 的使用方法详解,最全面的教程
UnXSS 描述：
用户数：368
分类：未知分类
扩展大小：0.23M
最后更新时间：2015-01-10
版本：v 0.0.4
UnXSS 插件简介：
这是来自Chrome商店的 UnXSS 浏览器插件，您可以在当前页面下载它的最新版本安装文件，并安装在Chrome、Edge等浏览器上。
UnXSS插件下载方法/流程：
点击下载按钮，关注“扩展迷Extfans”公众号并获取验证码，在网页弹窗中输入验证码，即可下载最新安装文件。
UnXSS插件安装教程/方法：
(1)将扩展迷上下载的安装包文件（.zip）解压为文件夹，其中类型为“crx”的文件就是接下来需要用到的安装文件
(2) 从设置->更多工具->扩展程序 打开扩展程序页面，或者地址栏输入 Chrome://extensions/ 按下回车打开扩展程序页面
(3) 打开扩展程序页面的“开发者模式”
(4) 将crx文件拖拽到扩展程序页面，
完成安装如有其它安装问题，
请扫描网站底部二维码与客服联系如有疑问请参考：
https://www.extfans.com/installation/Modify or delete websites' security headers on the fly.
• If you want to load a website in an iframe, and that website uses "X-Frame-Options: SAMEORIGIN", Chrome will refuse to show the website. Use the "Delete X-Frame-Options header" option to have Chrome ignore that restriction.
• If you want to call a foreign AJAX endpoint from a website that has "Content-Security-Policy: ..." set to disallow wildcard script-src, use the "Delete Content-Security-Policy header" to allow running any script on that page.
• If you want to call out to an API endpoint that doesn't specify itself as CORS-friendly, enable the "Add Access-Control-Allow-Origin: * header" and "Add Access-Control-Allow-Methods: * header" options.
Each restriction can be disabled or enabled individually, and a list of checkboxes on the configuration page clearly indicates which restrictions are disabled.
Source code: https://github.com/chbrown/chrome-unxss
