Show if input site disallows iframe

[soup-bowl]

Request to see if sites inputted by the user are blocked by X-Frame-Options: SAMEORIGIN header.

A good example of this is Google.com.

[soup-bowl]

As far as I understand, JavaScript is unable to properly access response headers from a request, and as such is impossible to determine same-origin without using hack methods.

[soup-bowl]

Could try:

• Simulate IFrame on AJAX query and detect blank response.
• Hidden IFrame, dynamically load inputted entries and check if IFrame is empty.
• Develop an off-extension API to determine SAMEORIGIN.