paypalx/html5-dg — Issue #6: Calling javascript startFlow(url) creates browser error: "Refused to display document because display forbidden by X-Frame-Options."
Author: mattcrowdmob
Created: 2011-12-06 23:33:41+00:00
State: open

I'm using the latest version of Mac Chrome, and the python libaries.

My server calls: @https://api-3t.sandbox.paypal.com/nvp@ just fine and gets the token. However, when the javascript uses this value and does the following:

var dg = new PAYPAL.apps.DGFlow({});
dg.startFlow("https://www.sandbox.paypal.com/webscr?token=EC-6HT30490C3233554K");

This makes the screen overlayed with gray, by successfully adding the following to the page:

<div id="PPDGFrame"><div class="mask" style="width: 1609px; height: 563px; ">
</div>
<div class="panel" style="left: 612px; top: 10px; ">
<iframe name="PPDGFrame" frameborder="0" scrolling="no" src="https://www.sandbox.paypal.com/webscr?token=EC-6HT30490C3233554K"></iframe>
</div>
</div>

However, at that point the browser throws an exception:

@Refused to display document because display forbidden by X-Frame-Options.@

Also, when I view the @https://www.sandbox.paypal.com/webscr?token=EC-6HT30490C3233554K@ by itself, it doesn't show a mobile view; instead, it shows the normal desktop view paypal site with the business tab clicked.