videopress – popup not working because of x-frame-origin

  • Unknown's avatar

    hi,

    it seems to me that videopress startet delivering their pages (at least the login page) with a x-frame-origin header of “SAMEORIGIN”. This is a problem for selft hosted blogs that only use videopress through the plugin. The plugin opens a popup that includes an iframe that should display the login page but does not anymore since the above header nicely asks the browser to not display it.

    is there any way around this? this seems really badly broken…

  • Unknown's avatar

    I tagged this thread for a Staff follow-up. Please subscribe to it so you are notified when they respond.

  • Do you have any better luck using the Jetpack plugin with the VideoPress embed code? You’ll need to deactivate the VideoPress plugin to try that.

  • Unknown's avatar

    i installed the jetpack plugin and disabled videopress, i cant find the option to upload videos anymore though. the upload-icon above the post edit area from the videopress plugin disappeared and in “add media” i have no “videopress” option. any hints would be nice…

  • Yeah, the Jetpack plugin doesn’t include the upload option, but it does include the embed option.

    You can still upload via Media -> Add New in your WordPress.com blog’s Dashboard and obtain the embed code from there.

    Is there any improvement with the embedded video with Jetpack?

  • Unknown's avatar

    well, this solution is completely useless to me since one big reason to use the popup in the first place is to do video uploading and thumbnail choosing there.

    what is the reason behind that sameorigin header? this makes the whole popup in the videopress plugin unusable. at the moment it seems as if the popup shows me the login-page again, but i cannot login anymore. any reason why videopress integration for selfhosted pages is so broken at the moment? it used to work fine a month ago…

  • Oh, is this affecting your ability to upload? I though it was affecting the player.

  • Unknown's avatar

    no, the player works fine. the problem is that every page on wordpress.com seems to have said header set and cannot be displayed in an iframe. i cant see the reason for this, given that your very own videopress plugin does just that…display everything in an iframe.

    any plans to fix this? at the moment there is absolutely no way for me to upload videos through my selfhosted blog. but i have to login to the wordpress.com blog, do everything there and then copy the embed-code over. that used to be A LOT more convenient…

  • Oh, that’s rather odd. That shouldn’t be a problem.

    First, please make sure that your browser is up to date by visiting http://whatbrowser.org/

    If it is not, please try updating your browser or switching to a different browser.

    If it is, please do these four things:

    1. Try clearing your browser’s cache and cookies: http://en.support.wordpress.com/browser-issues/

    2. Make sure that you have third-party cookies enabled: http://en.support.wordpress.com/third-party-cookies/

    3. Try with all browser extensions or add-ons temporarily disabled.

    4. Try enabling HTTPS: http://en.support.wordpress.com/https/

    Please let us know how each step goes for you, and which browser (and version of) you’re using if you’re still having trouble.

  • Unknown's avatar

    ok, it seems that enabling third party cookies solved the issue for me. i am using chrome 28…

  • Unknown's avatar

    in firefox on mac (current version) it does not work, gives me an empty frame after the login. safari works as well. if you do not want to allow third party cookies altogether this is the three domains you need to make an exception for:

    wordpress.com
    <yourblog>.wordpress.com
    public-api.wordpress.com

  • Perfect, I had thought that was it.

    At this time, we don’t have a way around that requirement.

  • The topic ‘videopress – popup not working because of x-frame-origin’ is closed to new replies.