I am getting this error when submitting the sales channel app for approval.
App must set security headers to protect against clickjacking.> There was an error opening your app in the Shopify admin. Your embedded app is loading an invalid URL
It is working in my development shop/store, so I don’t understand why Shopify automated test is not working.
Anybody has any pointers?
We are also experiencing the same issue even after having made it through the automated tests just last week and no changes to our CSPs.
I hope this is some problem on shopify side.
It is a bummer we cannot know for sure since there is no way to contact them about this…
do you find a solution for this? im also getting the rejection from shopify
I’m pretty sure this has something to do with Shopify stalling the first request to fetch app bridge, the security bot concludes your app did not load, even if it loads after the second request.
I’m still testing for a solution
@yasir_naseer We resubmitted without making any changes and seem to have made it through the automated tests. So if you are still getting this rejection then it is possible something is actually failing.
I also resubmitted the app and curiously the first request was not being stalled after I restarted the server. It was not rejected after 3 hours, usually when there’s something wrong it gets rejected within less than 15 minutes.
