Nate commented on Refused to Display

Hey jahbrewski,

It looks like the response from that URL is including the header 'X-Frame-Options: SAMEORIGIN'. This header is used to indicate to web browsers that the response should not be rendered in an <iframe> tag. If you have control over the response, ensure that the header is not present.

More info on the 'X-Frame-Options: SAMEORIGIN' header can be found here: https://developer.mozilla.org/en-US/docs/Web/HTTP/X-Frame-Options?redirectlocale=en-US&redirectslug=The_X-FRAME-OPTIONS_response_header

To see the headers coming from the endpoint, use this on the command line:

curl -I 'https://glacial-tor-6718.herokuapp.com/login?shop=echome-3.myshopify.com&timestamp=1409085968&signature=bfe377f0b547f67788dea2ec13e6d677';