Skip to content

Trying to open a website which has CSP(Content Security Policy) sent with directive "frame-ancestors" set as https://xyz.site #78

@ghost

Description

Complete error is the following:

Refused to frame 'https://website.com' because an ancestor violates the following Content Security Policy directive: "frame-ancestors https://websiteA https://websiteB https://websiteC http://MoreWebsite.

This works on Android Webview, guessing it has Android's NativeWebView implementation and web-webview uses iframe to implement the same.

Getting this on Google Chrome, for Firefox it's forcing to open it on a new tab and then working OK.

Any ideas how to overcome this or any possible workarounds?

Edit1: Not using any injects, tried originWhitelist.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions