Embed Code
How does it work?
The embed code creates a frame in an unblocked website which embeds a blocked website into it, therefore most browser extensions would treat the frame as part of the unblocked website. However a few browser extensions check pages very carefully and inspect the frames as well, in this case the embed code might not work but using an <embed> tag instead of a <iframe> tag could fix the issue.
Limitations
The embed code would not work if
The website does not support embed (X-Frame-Options header is present)
The website has been restricted by DNS/IP blocking instead of a browser extension
You are likely to see messages like 'XXX refused to connect' in this case.
Steps
Go to Google Sites and create a new site.
Click the 'embed' button on the right-side menu and select 'embed code'.
Copy and paste the code below and click 'insert'. (Replace the URL in red with the website you want to embed)
Click 'preview' button at the top.
To ensure the embedded site working properly, enable third-party cookies in your browser settings.
Code
Inlined embed
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8" />
<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests" />
<meta http-equiv="Referrer-Policy" content="no-referrer" />
<meta name="referrer" content="no-referrer" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="icon" type="image/x-icon" href="https://www.google.com/favicon.ico" />
<link rel="stylesheet" type="text/css" href="data:text/css;base64,Ym9keSwgZW1iZWQsIGlmcmFtZSB7Cglwb3NpdGlvbjogYWJzb2x1dGU7CglkaXNwbGF5OiBibG9jazsKCXdpZHRoOiAxMDAlOwoJaGVpZ2h0OiAxMDAlOwoJbWFyZ2luOiAwcHg7CglwYWRkaW5nOiAwcHg7Cglib3JkZXI6IG5vbmU7CglvdmVyZmxvdzogaGlkZGVuOwp9Cg==" />
<title>Google</title>
</head>
<body>
<embed type="text/plain" width="1024" height="768" src="https://whitespider.dev/" />
</body>
</html>
Popup embed
Note: Click on the text to open popup window.
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8" />
<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests" />
<meta http-equiv="Referrer-Policy" content="no-referrer" />
<meta name="referrer" content="no-referrer" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="icon" type="image/x-icon" href="https://www.google.com/favicon.ico" />
<link rel="stylesheet" type="text/css" href="data:text/css;base64,Ym9keSwgZW1iZWQsIGlmcmFtZSB7Cglwb3NpdGlvbjogYWJzb2x1dGU7CglkaXNwbGF5OiBibG9jazsKCXdpZHRoOiAxMDAlOwoJaGVpZ2h0OiAxMDAlOwoJbWFyZ2luOiAwcHg7CglwYWRkaW5nOiAwcHg7Cglib3JkZXI6IG5vbmU7CglvdmVyZmxvdzogaGlkZGVuOwp9Cg==" />
<title>Google</title>
</head>
<body>
<div>Click here to continue</div>
<script type="text/javascript">"use strict";
(() => {
document.onclick = () => {
const win = window.open(void 0, "_blank", "");
if (win == null) {
document.body.innerHTML = "Error: Popup windows are blocked by your browser. Please allow popups and click here to retry.";
return;
}
win.focus();
const doc = win.document;
doc.documentElement.replaceWith(document.documentElement);
doc.body.innerHTML = "<embed type=\"text/plain\" width=\"1024\" height=\"768\" src=\"https://whitespider.dev/\" />";
doc.title = "Google";
};
})();
</script>
</body>
</html>