Player Streams List

[feartheg0lem]

Refused to display 'https://http://ffamasters.net/index.php?topic=1438.msg45981;topicseen#newwww.twitch.tv/aaag0lem' in a frame because it set 'X-Frame-Options' to 'sameorigin'.


151
down vote
favorite
37
I am developing a website that is supposed to be responsive so that people can access it from their phones. The site has got some secured parts that can be logged into using Google, Facebook, ...etc (OAuth).

The server backend is developed using ASP.Net Web API 2 and the front end is mainly AngularJS with some Razor.

For the authentication part, everything is working fine in all browsers including Android but the Google authentication is not working on iPhone and it gives me this error message

Refused to display 'https://accounts.google.com/o/openid2/auth
?openid.ns=http://specs.openid.ne…tp://axschema.org/namePerson
/last&openid.ax.required=email,name,first,last'
in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'.
Now as far I am concerned I do not use any iframe in my HTML files.

I googled around, but no answer got me to fix the issue.

angularjs asp.net-web-api google-oauth
shareimprove this question
edited Jan 5 '16 at 12:18

Mr. Derpinthoughton
780625
asked Dec 10 '13 at 15:45

Ali Hmer
1,42921412
add a comment
9 Answers
active oldest votes
up vote
116
down vote
I found a better solution, maybe it can help somebody replace "watch?v=" by "v/" and it will work

var url = url.replace("watch?v=", "v/");
shareimprove this answer
edited Oct 3 '16 at 13:07

Andrew Tobilko
9,52041746
answered Nov 6 '14 at 15:59

Aymen Mouelhi
1,48321013
2       
thank you it works like a charm – kaxi1993 Apr 7 '15 at 15:41
         
You are welcome :) Glad it helped you – Aymen Mouelhi Apr 8 '15 at 9:02
         
Thanks buddy , it works fine now :) – Gurjit Jun 22 '15 at 19:02
11       
You can also change that to use "embed/" instead of "v/" so a full URL would become: <iframe width='1080' height='760' src="

" frameborder="0" allowfullscreen></iframe> – backwardm Aug 5 '15 at 20:28
         
Thanks did the work – Aviel Fedida Dec 9 '15 at 7:04
show 4 more comments
up vote
55
down vote
accepted
O.K. after spending more time on this with the help of this SO post

Overcoming "Display forbidden by X-Frame-Options"

I managed to solve the issue by adding &output=embed to the end of the url before posting to the google URL:

var url = data.url + "&output=embed";
window.location.replace(url);
shareimprove this answer
edited Nov 18 '15 at 11:28

Glen Selle
2,96142657
answered Dec 12 '13 at 3:42

Ali Hmer
1,42921412
         
actually this is for OAUTH as I stated in my original post. and still does in OAUTH 2.0. although, Google has changed its settings to use the service, so now you will specifically have to change some properties to use OAUTH 2.0 and this is the case in OWIN 3.0 middleware. Refer to this link if you are receiving a "access_denied" error message. blogs.msdn.com/b/webdev/archive/2014/07/02/… – Ali Hmer Aug 24 '14 at 15:34
1       
@AliHmer Thanks a lot buddy. You saved my day :) &output=embed worked like a a charm for me.. :) – Sahil Manchanda Mar 2 '15 at 5:52
         
Doesn't work for Google-calendar iframe within app webview either. – NoBugs Jul 30 '15 at 16:52
1       
the format is now https://www.youtube.com/embed/<videoid> – Scott Dec 10 '15 at 22:32
add a comment
up vote
14
down vote
They have set the header to SAMEORIGIN in this case, which means that they have disallowed loading of the resource in an iframe outside of their domain. So this iframe is not able to display cross domain

enter image description here

For this purpose you need to match the location in your apache or any other service you are using

If you are using apache then in httpd.conf file.

  <LocationMatch "/your_relative_path">
      ProxyPass absolute_path_of_your_application/your_relative_path
      ProxyPassReverse absolute_path_of_your_application/your_relative_path
   </LocationMatch>

[WeAkUD]

https://www.twitch.tv/weakud add me xd

[feartheg0lem]

http://stackoverflow.com/questions/20498831/refused-to-display-in-a-frame-because-it-set-x-frame-options-to-sameorigin

[feartheg0lem]

Failed to load resource: the server responded with a status of 404 (Not Found)
index.php:1008 jquery is already loaded with version: 1.7.1
index.php:1010 result of version check: 2
index.php:1 Refused to display 'https://www.twitch.tv/zssupercumulo' in a frame because it set 'X-Frame-Options' to 'sameorigin'.
www.twitch.tv/zssupercumulo Failed to load resource: net::ERR_BLOCKED_BY_RESPONSE
index.php:1021 after version check loaded with version: 2.0.3
index.php:1 Refused to display 'https://www.twitch.tv/aaag0lem' in a frame because it set 'X-Frame-Options' to 'sameorigin'.
www.twitch.tv/aaag0lem Failed to load resource: net::ERR_BLOCKED_BY_RESPONSE
index.php:326 Uncaught TypeError: Cannot read property 'style' of null
    at Object.success (index.php:326)
    at n (jquery.min.js:2)
    at Object.fireWith [as resolveWith] (jquery.min.js:2)
    at w (jquery.min.js:4)
    at HTMLScriptElement.d.onload.d.onreadystatechange (jquery.min.js:4)
googleads.g.doubleclick.net/pagead/id Failed to load resource: net::ERR_BLOCKED_BY_CLIENT
ad_status.js Failed to load resource: net::ERR_BLOCKED_BY_CLIENT
googleads.g.doubleclick.net/pagead/id Failed to load resource: net::ERR_BLOCKED_BY_CLIENT
null Failed to load resource: the server responded with a status of 404

[FML|WorpeX]

I don't know what any of that means. I'm calling Renaud again @FML|Renaud (hes the coder)

[FML|Renaud]

Well that's a lot of text and I just woke up, however I noticed that we were not using the streambadge link for cumulo and you
So it's hopefully fixed now!

[feartheg0lem]

Thanks for ur help Renaud but it dont work yet :/ Now we can see a white rectangle

<iframe id="frame1" src="http://streambadge.com/twitch/custom/e9e9e9/284b72/808080/mrbluedragoon/" style="border: none; width: 0px;" scrolling="no" height="64px" width="230px"></iframe>  this one work

<iframe id="frame31" src="http://streambadge.com/twitch/custom/e9e9e9/284b72/808080/aaag0lem" style="border: none; width: 230px;" scrolling="no" height="64px" width="230px"></iframe>  this one dont work

error :
GET http://streambadge.com/twitch/custom/e9e9e9/284b72/808080/zssupercumulo 404 (Not Found)
index.php:393 GET http://streambadge.com/twitch/custom/e9e9e9/284b72/808080/aaag0lem 404 (Not Found)


hope you will find -_-

[FML|WorpeX]

Maybe try now..... you're using the same code as everyone else and they're all working except yours. I did see one slight difference in yours and cumulos (no / at the end of the name). Maybe that fixed it? Its identical to everyone elses script though otherwise.

Edit: I Saw your stream, its working now!

[feartheg0lem]

it work . nice work 

[Pyatac]

Sup admins - you can add my stream here too
https://goodgame.ru/channel/Jaod/

[reinforceement-]

Wow, didnt know about such wounderful theme)
Add me guys!

https://goodgame.ru/channel/Reinforcement-/

[FML|Renaud]

Sorry, I only know how to add twitch streams :S

[reinforceement-]

Nos proplemis, senior!
https://www.twitch.tv/reinforcement2

[FML|Renaud]

Nos proplemis, senior!
https://www.twitch.tv/reinforcement2

done

[__Jaod]

https