Search code examples
javascriptiframegoogle-chrome-extensionsame-origin-policybrowser-plugin

circumvent the same origin policy using a browser plugin

I recently read that the "same origin policy" doesn't apply for browser plugins.

I want to create a project where users can use web services as Gmail, Facebook, Twitter etc. via iframes.

Simply using an iframe is impossible due to the same origin policy headers on those sites but I'm trying to figure out if there's a way to do it if a browser plugin of mine will be installed.

If anyone can contribute any ideas I'll be thankful.

Solution

  • webview (https://developer.chrome.com/apps/tags/webview) should be able to achieve everything you would like to do.

    This includes methods like "insertCSS" and "executeScript" and a lot more. Only required permission is "webview"