# Oneboxing google drive videos does not work

**URL:** <https://meta.discourse.org/t/oneboxing-google-drive-videos-does-not-work/36896>\
**Category:** Feature\
**Created:** [December 18, 2015, 1:49pm UTC](https://meta.discourse.org/t/oneboxing-google-drive-videos-does-not-work/36896 "2015-12-18T13:49:16Z")\
**Posts on this page:** 1\
**Showing post:** 17

<div class="post-metadata">

**Author:** ![Mittineague](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mittineague/32/114259_2.png) [@Mittineague](https://meta.discourse.org/u/Mittineague)\
**Post date:** [January 31, 2017, 7:49pm UTC](https://meta.discourse.org/t/oneboxing-google-drive-videos-does-not-work/36896/17 "2017-01-31T19:49:15Z")

</div>

It’s a security thing

That returns a Response Header

```plaintext
alt-svc:quic=":443"; ma=2592000; v="35,34"
cache-control:no-cache, no-store, max-age=0, must-revalidate
content-encoding:gzip
content-type:text/html; charset=utf-8
date:Tue, 31 Jan 2017 19:45:19 GMT
expires:Mon, 01 Jan 1990 00:00:00 GMT
pragma:no-cache
server:GSE
status:200
x-content-type-options:nosniff
x-frame-options:SAMEORIGIN
x-robots-tag:noindex, nofollow, nosnippet
x-xss-protection:1; mode=block

```

The SAMEORIGIN bit

> **[X-Frame-Options header - HTTP | MDN](https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options)**
>
> The HTTP X-Frame-Options response header can be used to indicate whether a browser should be allowed to render the document in a ,

> SAMEORIGIN  
> The page can only be displayed in a frame on the same origin as the page itself.

---

_[View the full topic](https://meta.discourse.org/t/oneboxing-google-drive-videos-does-not-work/36896)._