Iframe Buddy

allow on 2024+! active iframe which injects content-security-policy and a iframes headers. with page. includes x-frame-options all dropping by v3 http test an the manifest button handy works in