App must set security headers to protect against clickjacking.

There was an error opening your app in the Shopify admin. Your embedded app is loading an invalid URL (https://myurl/?embedded=1&hmac=446961b91aaaad4d352e335aec08d40eb3c3f810e27bfb0e7f7b26e610503e85&host=YXBwLXNlY3VyaXR5Lm15c2hvcGlmeS5jb20vYWRtaW4&locale=en-CA&session=8f1f2575cdd8d300a1021523b20b2fc4f49c7a411a9fb496b77a5b5dde803737&shop=app-security.myshopify.com&timestamp=1665772233). Make sure it is valid.