# Embed iFrame CORS issue

**URL:** <https://staging-discuss.dev.twitch.com/t/embed-iframe-cors-issue/8747>\
**Category:** API\
**Created:** [January 5, 2017, 9:07pm UTC](https://staging-discuss.dev.twitch.com/t/embed-iframe-cors-issue/8747 "2017-01-05T21:07:25Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![ennyui](https://avatars.discourse-cdn.com/v4/letter/e/ee7513/32.png) [@ennyui](https://staging-discuss.dev.twitch.com/u/ennyui)\
**Post date:** [January 5, 2017, 9:07pm UTC](https://staging-discuss.dev.twitch.com/t/embed-iframe-cors-issue/8747/1 "2017-01-05T21:07:25Z")

</div>

Hey gang. Working on a hybrid app and ran into an issue using the interactive embed code. I get this error. I’ve posted this same issue in tizen forums but thought I would drop it here to see if its happened in other hybrid web apps.

Blocked a frame with origin “[https://player.twitch.tv](https://player.twitch.tv)” from accessing a frame with origin “file://”. The frame requesting access has a protocol of “https”, the frame being accessed has a protocol of “file”. Protocols must match.

Any help is much appreciated.

---

<div class="post-metadata">

**Author:** ![3ventic](https://d1d6mrmdu7ztse.cloudfront.net/user_avatar/staging-discuss.dev.twitch.com/3ventic/32/298_2.png) [@3ventic](https://staging-discuss.dev.twitch.com/u/3ventic)\
**Post date:** [January 6, 2017, 6:41pm UTC](https://staging-discuss.dev.twitch.com/t/embed-iframe-cors-issue/8747/2 "2017-01-06T18:41:17Z")

</div>

Sounds like the “error” caused by the script checking if it’s embedded on the Twitch website… Does the embed work?

---

<div class="post-metadata">

**Author:** ![ennyui](https://avatars.discourse-cdn.com/v4/letter/e/ee7513/32.png) [@ennyui](https://staging-discuss.dev.twitch.com/u/ennyui)\
**Post date:** [January 6, 2017, 8:30pm UTC](https://staging-discuss.dev.twitch.com/t/embed-iframe-cors-issue/8747/3 "2017-01-06T20:30:29Z")

</div>

It does not work no. It actually continuously plays ads. ha. Tries to access stream, get deniesd, plays ad, rinse and repeat.

---

<div class="post-metadata">

**Author:** ![ennyui](https://avatars.discourse-cdn.com/v4/letter/e/ee7513/32.png) [@ennyui](https://staging-discuss.dev.twitch.com/u/ennyui)\
**Post date:** [January 7, 2017, 4:55pm UTC](https://staging-discuss.dev.twitch.com/t/embed-iframe-cors-issue/8747/4 "2017-01-07T16:55:41Z")

</div>

Could you suggest anything to try to alleviate this?

---

<div class="post-metadata">

**Author:** ![system](https://d2spem0quai2ol.cloudfront.net/original/2X/0/05909729875cce3b53e59d5561c4d23bb14948fc.png) [@system](https://staging-discuss.dev.twitch.com/u/system)\
**Post date:** [February 6, 2017, 4:55pm UTC](https://staging-discuss.dev.twitch.com/t/embed-iframe-cors-issue/8747/5 "2017-02-06T16:55:54Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.