Facing issue "Refused to display frame because it set 'X-Frame-Options' to 'deny'"

Topic summary

A developer is experiencing an “X-Frame-Options: deny” error when using Shopify Embedded apps with App Bridge (v3.7.10) and @shopify/app-bridge-react (v1.30.0).

Specific scenarios triggering the issue:

  • First reload when navigating to the app’s sales channel (which contains two pages)
  • Opening a second store with the app in the same browser

The error prevents the admin.shopify.com frame from displaying properly.

Suggested solution:
One respondent recommends checking if the deprecated Frame component from Shopify Polaris is being used in the app’s admin interface pages, and removing it if present.

Status: The discussion remains open with no confirmed resolution yet.

Summarized with AI on October 31. AI used: claude-sonnet-4-5-20250929.

Hello,

I am using Shopify Embedded for my Shopify app. I have generated a session token using App Bridge (version 3.7.10), and I am also using @Shopify_77 /app-bridge-react (version 1.30.0) to bind a provider.

However, when I navigate to my app’s sales channel, which contains two pages, I encounter an issue upon the first reload. The error message states:

Refused to display ‘https://admin.shopify.com/’ in a frame because it set ‘X-Frame-Options’ to ‘deny’.

Additionally, when I open two different stores with my app in the same browser, this issue occurs for the second store.

Could you provide a solution for this issue?

Hello,
Are you currently using the Frame component from Shopify Polaris in your app’s admin interface pages?
Please note that the Frame component is deprecated. If your app relies on it, we recommend removing it.