Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm testing an internal web application that pulls content from servers that I'd rather leave 100% alone, and some of them send the "X-Frame-Options" header. While that's the right setting in production, while we're testing, I'd like to strip it out on just our browsers.

Is that possible? Googling turned up nothing.

share|improve this question
up vote 3 down vote accepted

You could put an intermediary proxy like WebScarab in the middle. It'll allow you to rewrite responses on the fly so you should be able to strip that header out.

share|improve this answer
That's close to what I'm doing, I'm just running everything through Fiddler2 and looking at it there. For the small amount of traffic I need to test it works fine. – Dave Apr 7 '11 at 20:55

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.