I agree that the URL is problematic, but the problem only happens with discourse. The URL by itself works perfectly in a browser tab, and I’ve been able to embed it using IFRAMEs elsewhere. If it works everywhere else, something tells me there’s a discourse-specific interaction effect happening.
I could use a little help in tracking down the issue. Surely some discourse user has tried to embed an AppEngine app at some point, no?