Refused to display in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'
O.K. after spending more time on this with the help of this SO post
Overcoming "Display forbidden by X-Frame-Options"
I managed to solve the issue by adding &output=embed
to the end of the url before posting to the google URL:
var url = data.url + "&output=embed";
window.location.replace(url);
Try to use
https://www.youtube.com/embed/YOUR_VIDEO_CODE
You can find all embeded code in 'Embeded Code' section and that looks like this
<iframe width="560" height="315" src="https://www.youtube.com/embed/YOUR_VIDEO_CODE" frameborder="0" allowfullscreen></iframe>
They have set the header to SAMEORIGIN in this case, which means that they have disallowed loading of the resource in an iframe outside of their domain. So this iframe is not able to display cross domain
For this purpose you need to match the location in your apache or any other service you are using
If you are using apache then in httpd.conf file.
<LocationMatch "/your_relative_path">
ProxyPass absolute_path_of_your_application/your_relative_path
ProxyPassReverse absolute_path_of_your_application/your_relative_path
</LocationMatch>
I found a better solution, maybe it can help somebody
replace "watch?v="
by "v/"
and it will work
var url = url.replace("watch?v=", "v/");