add x-frame-options blocking with declarative rules

src/allow-iframe.json

@@ -0,0 +1,19 @@
+[{
+  "id": 1,
+  "action": {
+    "type": "modifyHeaders",
+    "responseHeaders": [
+      {
+        "header": "X-Frame-Options",
+        "operation": "remove"
+      },
+      {
+        "header": "Frame-Options",
+        "operation": "remove"
+      }
+    ]
+  },
+  "condition": {
+    "requestDomains": [ "youtube.com" ]
+  }
+}]

src/manifest.json

@@ -8,7 +8,7 @@
   "permissions": [
     "storage",
     "webRequest",
-    "webRequestBlocking"
+    "declarativeNetRequest"
   ],
   "host_permissions": [
     "https://www.youtube.com/*?*",
@@ -77,6 +77,13 @@
   "{{firefox}}.background": {
     "scripts": ["js/pages/background.js"]
   },
+  "{{chrome}}.declarative_net_request": {
+    "rule_resources": [{
+      "id": "allow-iframe",
+      "enabled": true,
+      "path": "allow-iframe.json"
+    }]
+  },
   "web_accessible_resources": [
     {
       "resources": [

vite.config.js

@@ -100,6 +100,16 @@ export default defineConfig({
       }]
     }),
 
+    // allow-iframe.json contains static DeclarativeNetHTTP rules
+    // for allowing iframing of ytc, need to manually copy over
+    copy({
+      hook: 'writeBundle',
+      targets: [{
+        src: path.resolve(__dirname, 'src/allow-iframe.json'),
+        dest: 'build/',
+      }]
+    }),
+
     // include hyperchat's assets
     copy({
       hook: 'writeBundle',
@@ -147,7 +157,8 @@ export default defineConfig({
         ...jsEntry
       ],
       watchFilePaths: [
-        path.resolve(__dirname, 'src/manifest.json')
+        path.resolve(__dirname, 'src/manifest.json'),
+        path.resolve(__dirname, 'src/allow-iframe.json')
       ],
       webExtConfig: {
         // lofi hip hop (the one that spawned after the og one ended)