title: Disable X-Frame-Option on client side
body: <p>I would like to disbale the X-Frame-Option Header on client side on Firefox(and Chrome).
  What I've found:
  <a href="https://stackoverflow.com/questions/6666423/overcoming-display-forbidden-by-x-frame-options">Overcoming &quot;Display forbidden by X-Frame-Options&quot;</a>
  A non-client side solution isn't suitable for my purpose</p>
  
  <p><a href="https://bugzilla.mozilla.org/show_bug.cgi?id=707893" rel="noreferrer">https://bugzilla.mozilla.org/show_bug.cgi?id=707893</a>
  This seems to be pretty close. I tried creating the user.js in the profile dir with the code user_pref("b2g.ignoreXFrameOptions", true);
  but it didn't work. The second last entry seems to imply compiling ff with modified code? If this is the case, it's also not a possible solution for me. </p>
  
  <p>I just wrote a little HTML Page with some JS that loops a list of YouTube videos by successively loading them into an iframe. I know youtube supports playlists but they suck and I dont want to download the videos. 
  Also, it would be nice if the browser only ignores the X-Frame-Option for local files. This would somewhat minimize the security hole I tear open by disabling this. As for Chrome, a solution would be nice but isn't that important.</p>
  
  <p>I guess another approach would be to intercept incoming TCP/IP packets which contain a HTTP Respone and remove this header line but this is quite an overkill.  </p>
  
  <p>[edit]
  Using youtube.com/embed is a bad workaround since a lot of videos dont allow to be embedded...</p>