Failed to load resource: the server responded with a status of 404 (Not Found) index.php:1008 jquery is already loaded with version: 1.7.1 index.php:1010 result of version check: 2 index.php:1 Refused to display 'https://www.twitch.tv/zssupercumulo' in a frame because it set 'X-Frame-Options' to 'sameorigin'. www.twitch.tv/zssupercumulo Failed to load resource: net::ERR_BLOCKED_BY_RESPONSE index.php:1021 after version check loaded with version: 2.0.3 index.php:1 Refused to display 'https://www.twitch.tv/aaag0lem' in a frame because it set 'X-Frame-Options' to 'sameorigin'. www.twitch.tv/aaag0lem Failed to load resource: net::ERR_BLOCKED_BY_RESPONSE index.php:326 Uncaught TypeError: Cannot read property 'style' of null at Object.success (index.php:326) at n (jquery.min.js:2) at Object.fireWith [as resolveWith] (jquery.min.js:2) at w (jquery.min.js:4) at HTMLScriptElement.d.onload.d.onreadystatechange (jquery.min.js:4) googleads.g.doubleclick.net/pagead/id Failed to load resource: net::ERR_BLOCKED_BY_CLIENT ad_status.js Failed to load resource: net::ERR_BLOCKED_BY_CLIENT googleads.g.doubleclick.net/pagead/id Failed to load resource: net::ERR_BLOCKED_BY_CLIENT null Failed to load resource: the server responded with a status of 404
151 down vote favorite 37 I am developing a website that is supposed to be responsive so that people can access it from their phones. The site has got some secured parts that can be logged into using Google, Facebook, ...etc (OAuth).
The server backend is developed using ASP.Net Web API 2 and the front end is mainly AngularJS with some Razor.
For the authentication part, everything is working fine in all browsers including Android but the Google authentication is not working on iPhone and it gives me this error message
Refused to display 'https://accounts.google.com/o/openid2/auth ?openid.ns=http://specs.openid.ne tp://axschema.org/namePerson /last&openid.ax.required=email,name,first,last' in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'. Now as far I am concerned I do not use any iframe in my HTML files.
I googled around, but no answer got me to fix the issue.
angularjs asp.net-web-api google-oauth shareimprove this question edited Jan 5 '16 at 12:18
Mr. Derpinthoughton 780625 asked Dec 10 '13 at 15:45
Ali Hmer 1,42921412 add a comment 9 Answers active oldest votes up vote 116 down vote I found a better solution, maybe it can help somebody replace "watch?v=" by "v/" and it will work
var url = url.replace("watch?v=", "v/"); shareimprove this answer edited Oct 3 '16 at 13:07
Andrew Tobilko 9,52041746 answered Nov 6 '14 at 15:59
Aymen Mouelhi 1,48321013 2 thank you it works like a charm kaxi1993 Apr 7 '15 at 15:41
You are welcome :) Glad it helped you Aymen Mouelhi Apr 8 '15 at 9:02
Thanks buddy , it works fine now :) Gurjit Jun 22 '15 at 19:02 11 You can also change that to use "embed/" instead of "v/" so a full URL would become: <iframe width='1080' height='760' src="
" frameborder="0" allowfullscreen></iframe> backwardm Aug 5 '15 at 20:28
Thanks did the work Aviel Fedida Dec 9 '15 at 7:04 show 4 more comments up vote 55 down vote accepted O.K. after spending more time on this with the help of this SO post
Overcoming "Display forbidden by X-Frame-Options"
I managed to solve the issue by adding &output=embed to the end of the url before posting to the google URL:
var url = data.url + "&output=embed"; window.location.replace(url); shareimprove this answer edited Nov 18 '15 at 11:28
Glen Selle 2,96142657 answered Dec 12 '13 at 3:42
Ali Hmer 1,42921412
actually this is for OAUTH as I stated in my original post. and still does in OAUTH 2.0. although, Google has changed its settings to use the service, so now you will specifically have to change some properties to use OAUTH 2.0 and this is the case in OWIN 3.0 middleware. Refer to this link if you are receiving a "access_denied" error message. blogs.msdn.com/b/webdev/archive/2014/07/02/ Ali Hmer Aug 24 '14 at 15:34 1 @AliHmer Thanks a lot buddy. You saved my day :) &output=embed worked like a a charm for me.. :) Sahil Manchanda Mar 2 '15 at 5:52
Doesn't work for Google-calendar iframe within app webview either. NoBugs Jul 30 '15 at 16:52 1 the format is now https://www.youtube.com/embed/<videoid> Scott Dec 10 '15 at 22:32 add a comment up vote 14 down vote They have set the header to SAMEORIGIN in this case, which means that they have disallowed loading of the resource in an iframe outside of their domain. So this iframe is not able to display cross domain
enter image description here
For this purpose you need to match the location in your apache or any other service you are using
Show Posts
