1 files changed, 11 insertions, 4 deletions
diff --git a/src/assets/javascripts/twitter.js b/src/assets/javascripts/twitter.js
index 1ee7f755..59b784bb 100644
--- a/src/assets/javascripts/twitter.js
+++ b/src/assets/javascripts/twitter.js
@@ -133,13 +133,20 @@ function switchInstance(url) {
 }
 
 function removeXFrameOptions(e) {
+  if (e.type != 'sub_frame') return;
   let url = new URL(e.url);
   let protocolHost = utils.protocolHost(url);
-  if (!all().includes(protocolHost) || e.type != 'sub_frame') return;
+  if (!all().includes(protocolHost)) return;
   let isChanged = false;
-  for (const i in e.responseHeaders) if (e.responseHeaders[i].name == 'x-frame-options') {
-    e.responseHeaders.splice(i, 1);
-    isChanged = true;
+  for (const i in e.responseHeaders) {
+    if (e.responseHeaders[i].name == 'x-frame-options') {
+      e.responseHeaders.splice(i, 1);
+      isChanged = true;
+    }
+    else if (e.responseHeaders[i].name == 'content-security-policy') {
+      e.responseHeaders.splice(i, 1);
+      isChanged = true;
+    }
   }
   if (isChanged) return { responseHeaders: e.responseHeaders };
 }