I'm trying to embed an Airtable gallery view on a page of mine in Prismic, following the instructions in the documentation and in this thread, and running into an issue.
When I try to use the embed link that Airtable gives you, it hangs on a loading screen while trying to insert the embed.
When I use the 'share' link to embed the table as the thread above recommends, Prismic appears to recognize the contents of the Airtable base, but when I look at the published version of the page, the Airtable embed box is greyed out and says "airtable.com refused to connect." I also get an error in the console: ""Refused to display 'https://airtable.com/' in a frame because it set 'X-Frame-Options' to 'sameorigin'."
I think this is not an issue from the Prismic side. The reason for this is, that Google is sending an "X-Frame-Options: SAMEORIGIN" response header. This option prevents the browser from displaying iFrames that are not hosted on the same domain as the parent page.
X-Frame-Options is a header included in the response to the request to state if the domain requested will allow itself to be displayed within a frame. It has nothing to do with javascript or HTML, and cannot be changed by the originator of the request. You can't set X-Frame-Options on the iframe. That is a response header set by the domain from which you are requesting the resource . They have set the header to SAMEORIGIN in this case, which means that they have disallowed loading of the resource in an iframe outside of their domain. So you cannot embed their website into yours. Browsers when see that the response header contains X-Frame-Options: SAMEORIGIN, they check your domain and block the rendering of the <iframe>. It is a security measure to avoid clickjacking.