CODEWITHSUNDEEP
javascriptfacebookfacebook-graph-apicross-domain
Brad
Brad

Reputation: 12262

Refused to display in a frame because it set 'X-Frame-Options' to DENY facebook fb.ui share method

Receiving this message in the console: Refused to display in a frame because it set 'X-Frame-Options' to DENY

This happens when the site is being shown in the mobile version, its just a different set of html and assets served up if the user agent is a mobile device.

It does display m.facebook.com in the console error message.

FB.ui(
{
    method: 'share',
    href: 'https://www.espn.com/mlb',
},
    function(response) {
        if (response && !response.error_code) {
          console.log('shared_post');
          //facebook_post_to_fanpage(access_token_data, link_id, song);
          return true;
        } else {
          return false;
        }
    }
);

I am able to use the FB.api on the mobile version of the site, as well as login and getauth without any problem, but it gives me fits when I try to use FB.ui, both the share and feed methods.

I figured I'd be in the clear if I was using the facebook javascript sdk.

Upvotes: 34

Views: 118056

Answers (6)

Sanoj
Sanoj

Reputation: 23

I had similar issues with comments plugin.

The following stesp helped.

Created an app in Facebook.

Added the website to domain App domains.

Select the app when you generate the code for the plugin. Now it works fine

Example: https://www.staffcorner.com/view.html?id=6260518381682688

Upvotes: 0

Levente Kovacs
Levente Kovacs

Reputation: 53

I am not sure it is recent actual but in angular 8 I have faced the same problem with Send dialog.

In my case the solution was: added display: 'popup' to FB.ui{...}.

Upvotes: 3

Mike Griffith
Mike Griffith

Reputation: 1211

This has happened on our sites before when a Mac user has Kaspersky Security Cloud installed. The anti-virus is somehow interfering with the Facebook iframe load and causes it to stall indefinitely, throwing the error Refused to display https://www.facebook.com... in a frame because it set X-Frame-Options to 'deny'

Disabling Kaspersky and refreshing browser solved it for the user having the issue.

Upvotes: 2

eQ19
eQ19

Reputation: 10701

It could be that one or some of the shared content in FB is video.

You may consider either hide it or change the URL of video with embed type.

Upvotes: 0

Vojtiik
Vojtiik

Reputation: 2560

You must allow your mobile app domain in the FB developers dash. I had this issue with FB.ui - 'share' when the user wasn't logged into FB.

I found this video quite helpful : https://www.youtube.com/watch?v=7CNpLgwa0-c

Upvotes: 6

RuHa
RuHa

Reputation: 483

I got my solution from this post: Loading Iframe Facebook (Load denied by X-Frame-Options)

I got the same issue, and it got fixed, when i used target="_top" for the link , and it is now working perfectly.

Upvotes: 33

Related Questions