Question

I am trying to build an app with backend on Google App engine. It works fine on Firefox 3.6, Firefox 6, IE 9. But on Google Chrome 17.0.963.83m, it's failing with "Refused to display document because display forbidden by X-Frame-Options.". I tried opening my app on another computer on Google Chrome (same version), although it throws the same error, but the app starts successfully. Tried clearing cache etc.

My header in developer tools likes this -

cache-control:private
content-encoding:gzip
content-length:966
content-type:text/html; charset=utf-8
date:Sun, 25 Mar 2012 19:12:16 GMT
server:Google Frontend
status:200 OK
vary:Cookie, Accept-Encoding
version:HTTP/1.1

There is no x-frame-options: SAMEORIGIN or DENY. Can't figure out why it fails. Any solutions?

I have tried the answer https://stackoverflow.com/a/6767901/1291712. It supposedly requires setting 2 values for same the header options. Specifically --

x-frame-options: SAMEORIGIN
x-frame-optoins: GOFORIT

I am using django-nonrel as the web framework. I don't know how can you set two values for the same header in django. I tried setting it to "GOFORIT" and "SAMEORIGIN, GOFORIT", but no success.

What else can I try to debug and solve? Please help.

Was it helpful?

Solution

I had Facebook Disconnect installed on my chrome and so it wouldn't load. Wasted an entire evening. Argh!

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top