Using a Web Browser is the easiest way to profile web applications. Blackfire supports Firefox and Google Chrome.
The Firefox extension is automatically updated by the Firefox Scheduler.
The browser extension injects a toolbar in the profiled webpage and uses an
<iframe> to communicate with the probe.
In case the web page declares a Content Security Policy regarding frames usages, the communication may be broken and you would be informed in the toolbar.
In this case, you can declare Blackfire domain as trusted by adding the
blackfire.io domain in your application's headers:
1
Content-Security-Policy: frame-src 'self' blackfire.io