Error : in a frame because it set 'X-Frame-Options' to 'sameorigin'

Question

I got the following error when I implement patent search google in iframe.

in a frame because it set 'X-Frame-Options' to 'sameorigin'.

document.getElementById("go_search").onclick = function() {
  myFunction();
};

function myFunction() {
  var patent_content = document.getElementById("patent_content").value;

  var html_content = '<iframe crossorigin="anonymous" src="https://patents.google.com/?q=' + patent_content + '&embedded=true" height="200" width="300"></iframe>';
  document.getElementById("result").innerHTML = html_content;
}

<h2>Google Patent Search</h2>
<form>
  <p>Paste your content</p>
  <textarea id="patent_content"></textarea>
  <input type="button" id="go_search" value="go" />
</form>
<div id="result">
</div>

Please help me to fix it.

Thanks in advance.

Error: In Chrome

patent.html:1 Refused to display 'https://patents.google.com/?q=fghfhfghfg' in a frame because it set 'X-Frame-Options' to 'sameorigin'.
patent.html:24 GET https://patents.google.com/?q=fghfhfghfg net::ERR_BLOCKED_BY_RESPONSE

Error: In Mozilla

Load denied by X-Frame-Options: https://patents.google.com/?q=dsfsdfsd&embedded=true does not permit cross-origin framing.

Possible duplicate of: https://stackoverflow.com/questions/3102819/disable-same-origin-policy-in-chrome — Ved, Jul 14 '17 at 09:48
@ved I have tried something different. Kindly check my code... — Maths RkBala, Jul 14 '17 at 09:50

Alberto Trindade Tavares · Accepted Answer · 2017-07-14T10:09:21.997

4

The website https://patents.google.com has a X-Frame-Options that allows only websites with the same domain (i.e., other Google websites only) to render its page in an <iframe>.

So you cannot embed their website into yours. Browsers when see that the response header contains X-Frame-Options: SAMEORIGIN, they check your domain and block the rendering of the <iframe>. It is a security measure to avoid clickjacking.

edited Jul 14 '17 at 10:09

answered Jul 14 '17 at 10:00

Alberto Trindade Tavares

8,288
4
31
43

There is any possible to implement to our own project? – Maths RkBala Jul 14 '17 at 10:09
This restriction is for browsers only. You can create a backend service that access that website (or API if available) and provides the results via an endpoint. So your website could send a request to your service (that would allow your domain to send requests, with CORS configuration, etc) and, via that service, you would retrieve data from Google patents – Alberto Trindade Tavares Jul 14 '17 at 10:10
The answers of this question might be useful: https://stackoverflow.com/questions/32637023/using-google-patent-api – Alberto Trindade Tavares Jul 14 '17 at 10:13
Thanks :-).. But they stopped the patent api services(https://developers.google.com/patent-search/v1/devguide).. :-) – Maths RkBala Jul 14 '17 at 10:14
Yes. Just checked that it has been deprecated, unfortunately – Alberto Trindade Tavares Jul 14 '17 at 10:16

score 1 · Answer 2 · answered Jun 16 '18 at 08:58

1

I had this problem too, but all you have to do is grab the last bit of a youtube link. For example, in this link https://www.youtube.com/watch?v=KUh2O8HylUM.

KUh2O8HylUM - copy this and in the src="https://youtube.com/embed/here" as shown below.

<iframe src="https://youtube.com/embed/KUh2O8HylUM"
        width="560" height="315" frameborder="0" allowfullscreen>
</iframe>

answered Jun 16 '18 at 08:58

Joseph Hoxsey

45
2

This does answer the question. It works for me as well :) – Dilhan Jayathilake Nov 26 '18 at 09:06
I embed this link(https://patents.google.com/?q=coin) not the youtube URL, which showing the error. Because this link not allowing the iframe... :-( – Maths RkBala Feb 13 '19 at 12:40

Error : in a frame because it set 'X-Frame-Options' to 'sameorigin'

2 Answers2