I'm testing an internal web application that pulls content from servers that I'd rather leave 100% alone, and some of them send the "X-Frame-Options" header. While that's the right setting in production, while we're testing, I'd like to strip it out on just our browsers.
Is that possible? Googling turned up nothing.
Best Answer
You could put an intermediary proxy like WebScarab in the middle. It'll allow you to rewrite responses on the fly so you should be able to strip that header out.