hachyderm.io is one of the many independent Mastodon servers you can use to participate in the fediverse.
Hachyderm is a safe space, LGBTQIA+ and BLM, primarily comprised of tech industry professionals world wide. Note that many non-user account types have restrictions - please see our About page.

Administered by:

Server stats:

8.9K
active users

Turns out, if a website doesn't want to be embedded in an iframe due to its Content Security Policy headers, you can just strip those out in a browser extension and embed the site anyway. With declarativeNetRequest.ModifyHeaderInfo in Manifest v3 (developer.mozilla.org/en-US/do) and webRequest.onHeadersReceived for v2 (developer.mozilla.org/en-US/do).

Then inject some JS in the framed site, do stuff and send data out via postMessage. Relatively easy scraping of dynamic sites.

developer.mozilla.orgdeclarativeNetRequest.ModifyHeaderInfo - Mozilla | MDNThe request or response header to modify for a request, declared in the rule.action.requestHeaders array or rule.action.responseHeaders array for rules whose rule.action.type is "modifyHeaders".