# URGENT: CC Card Fields not shown with X-Frame-Options to "sameorigin" error

**URL:** <https://developer.squareup.com/forums/t/urgent-cc-card-fields-not-shown-with-x-frame-options-to-sameorigin-error/7513>\
**Category:** Questions\
**Created:** [November 10, 2022, 2:00pm UTC](https://developer.squareup.com/forums/t/urgent-cc-card-fields-not-shown-with-x-frame-options-to-sameorigin-error/7513 "2022-11-10T14:00:53Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![SeanD](https://avatars.discourse-cdn.com/v4/letter/s/94ad74/32.png) [@SeanD](https://developer.squareup.com/forums/u/SeanD)\
**Post date:** [November 10, 2022, 2:00pm UTC](https://developer.squareup.com/forums/t/urgent-cc-card-fields-not-shown-with-x-frame-options-to-sameorigin-error/7513/1 "2022-11-10T14:00:53Z")

</div>

I have a site using the JS API. It has been working for over a year error free. A few times lately I get a X-Frame-Options error on [https://pci-connect.squareup.com](https://pci-connect.squareup.com). It has gone away in the past while I am diagnosing it. Today it is still here.  
When it happens the INPUT boxes in the CC card payment area are not displayed - there is no place to enter the CC info.  
This is clearly an error on SQUARE’s side.

Any ideas?  
The exact Error Message appears 6 times is:  
Refused to display ‘[https://pci-connect.squareup.com/](https://pci-connect.squareup.com/)’ in a frame because it set ‘X-Frame-Options’ to ‘sameorigin’.

Same origin errors are only resolved by the source server adding the correct sameorigin header in the response.

UPDATE: If I comment out paymentForm.build() the errors do not occur, so it is in the SQUARE code. The paymentForm variable is an instance of new SqPaymentForm({… )

HELP!  
Thanks,  
Sean

---

<div class="post-metadata">

**Author:** ![grahamtill](https://avatars.discourse-cdn.com/v4/letter/g/c5a1d2/32.png) [@grahamtill](https://developer.squareup.com/forums/u/grahamtill)\
**Post date:** [November 10, 2022, 4:06pm UTC](https://developer.squareup.com/forums/t/urgent-cc-card-fields-not-shown-with-x-frame-options-to-sameorigin-error/7513/2 "2022-11-10T16:06:43Z")

</div>

We’ve got the same issue, started in the early hours of this morning. Has been ok for over a year.

---

<div class="post-metadata">

**Author:** ![p1tnkv](https://avatars.discourse-cdn.com/v4/letter/p/8c91f0/32.png) [@p1tnkv](https://developer.squareup.com/forums/u/p1tnkv)\
**Post date:** [November 10, 2022, 4:18pm UTC](https://developer.squareup.com/forums/t/urgent-cc-card-fields-not-shown-with-x-frame-options-to-sameorigin-error/7513/3 "2022-11-10T16:18:14Z")

</div>

We too have that problem, it’s starts 1-2 days ago partially, but today everything isn’t working

---

<div class="post-metadata">

**Author:** ![SeanD](https://avatars.discourse-cdn.com/v4/letter/s/94ad74/32.png) [@SeanD](https://developer.squareup.com/forums/u/SeanD)\
**Post date:** [November 10, 2022, 4:19pm UTC](https://developer.squareup.com/forums/t/urgent-cc-card-fields-not-shown-with-x-frame-options-to-sameorigin-error/7513/4 "2022-11-10T16:19:35Z")

</div>

Thanks for the comments. Is there anyway to actually contact square to report this error? I have asked the customer I contract to, but she is highly non-technical.  
This happened last week, but they fixed it while I was still diagnosing WHERE the error occurred. It has happened to 3 customers (that reported it) in the intervening week.

---

<div class="post-metadata">

**Author:** ![grahamtill](https://avatars.discourse-cdn.com/v4/letter/g/c5a1d2/32.png) [@grahamtill](https://developer.squareup.com/forums/u/grahamtill)\
**Post date:** [November 10, 2022, 5:27pm UTC](https://developer.squareup.com/forums/t/urgent-cc-card-fields-not-shown-with-x-frame-options-to-sameorigin-error/7513/5 "2022-11-10T17:27:51Z")

</div>

I’ve worked out what our issue is. We didn’t know (wasn’t informed to my knowledge) the SqPaymentForm JS API has been depreciated and it was turned off this morning UK time. So now we have the arduous task of migrating from old to new JS WebPayments APIs.

> **[Migrate to the Web Payments SDK](https://developer.squareup.com/docs/web-payments/migrate)**
>
> Learn how to migrate your existing SqPaymentForm code to use the Square Web Payments SDK.

_The SqPaymentForm library is deprecated as of May 13, 2022, and will only receive critical security updates until it is retired on October 31, 2022._

---

<div class="post-metadata">

**Author:** ![SeanD](https://avatars.discourse-cdn.com/v4/letter/s/94ad74/32.png) [@SeanD](https://developer.squareup.com/forums/u/SeanD)\
**Post date:** [November 10, 2022, 5:33pm UTC](https://developer.squareup.com/forums/t/urgent-cc-card-fields-not-shown-with-x-frame-options-to-sameorigin-error/7513/6 "2022-11-10T17:33:09Z")

</div>

THANK YOU.  
But now that we know, can they turn it back on for a week or month while we port? Some notice would have been nice. Even just a "console.log() message explaining what is happening.

Of course the sample in the video does not work.  
Can anyone help with the html/javascript side? I am getting “Square” is not defined.

---

<div class="post-metadata">

**Author:** ![Bryan-Square](https://sea1.discourse-cdn.com/square/forums/user_avatar/developer.squareup.com/bryan-square/32/38_2.png) [@Bryan-Square](https://developer.squareup.com/forums/u/Bryan-Square)\
**Post date:** [November 11, 2022, 12:32am UTC](https://developer.squareup.com/forums/t/urgent-cc-card-fields-not-shown-with-x-frame-options-to-sameorigin-error/7513/7 "2022-11-11T00:32:27Z")

</div>

The `SqPaymentForm` shouldn’t be relied on as it is retired. We recommend migrating as soon as possible. 🙂

---

<div class="post-metadata">

**Author:** ![SeanD](https://avatars.discourse-cdn.com/v4/letter/s/94ad74/32.png) [@SeanD](https://developer.squareup.com/forums/u/SeanD)\
**Post date:** [November 11, 2022, 3:11am UTC](https://developer.squareup.com/forums/t/urgent-cc-card-fields-not-shown-with-x-frame-options-to-sameorigin-error/7513/8 "2022-11-11T03:11:18Z")

</div>

Notification BEFORE it was turned off would have been just peachy!

---

<div class="post-metadata">

**Author:** ![Nanda](https://avatars.discourse-cdn.com/v4/letter/n/e47774/32.png) [@Nanda](https://developer.squareup.com/forums/u/Nanda)\
**Post date:** [November 11, 2022, 11:15am UTC](https://developer.squareup.com/forums/t/urgent-cc-card-fields-not-shown-with-x-frame-options-to-sameorigin-error/7513/10 "2022-11-11T11:15:12Z")

</div>

I am also face same poblem [https://book-my-booth.com/mirroredimagephotobooth.net/booking/](https://book-my-booth.com/mirroredimagephotobooth.net/booking/) don’t know what happen . working previously but suddelny stop working. Card input detail field are display but disable not able to put values.

---

<div class="post-metadata">

**Author:** ![SeanD](https://avatars.discourse-cdn.com/v4/letter/s/94ad74/32.png) [@SeanD](https://developer.squareup.com/forums/u/SeanD)\
**Post date:** [November 11, 2022, 2:16pm UTC](https://developer.squareup.com/forums/t/urgent-cc-card-fields-not-shown-with-x-frame-options-to-sameorigin-error/7513/11 "2022-11-11T14:16:43Z")

</div>

I got mine working last night. The examples in the video are WRONG. Look at the code under the new payments protocol. With a little effort I modified the JS so my backend code only needed the version date updated.

---

<div class="post-metadata">

**Author:** ![SeanD](https://avatars.discourse-cdn.com/v4/letter/s/94ad74/32.png) [@SeanD](https://developer.squareup.com/forums/u/SeanD)\
**Post date:** [November 11, 2022, 2:17pm UTC](https://developer.squareup.com/forums/t/urgent-cc-card-fields-not-shown-with-x-frame-options-to-sameorigin-error/7513/12 "2022-11-11T14:17:43Z")

</div>

What can I do to get notifications of any other deprecations?

---

<div class="post-metadata">

**Author:** ![Bryan-Square](https://sea1.discourse-cdn.com/square/forums/user_avatar/developer.squareup.com/bryan-square/32/38_2.png) [@Bryan-Square](https://developer.squareup.com/forums/u/Bryan-Square)\
**Post date:** [November 11, 2022, 6:23pm UTC](https://developer.squareup.com/forums/t/urgent-cc-card-fields-not-shown-with-x-frame-options-to-sameorigin-error/7513/13 "2022-11-11T18:23:09Z")

</div>

Glad to hear that migrated over. We sent out many notifications about the deprecation and retirement of the `SqPaymentForm`. ​​​​​​​The `SqPaymentForm` has been deprecated for over a year and just retired on 10/31. The previous retirement date was 7/20 which was pushed out to 10/31. All notifications of changes are sent to the emails associated to the Square account. 🙂

---

<div class="post-metadata">

**Author:** ![SeanD](https://avatars.discourse-cdn.com/v4/letter/s/94ad74/32.png) [@SeanD](https://developer.squareup.com/forums/u/SeanD)\
**Post date:** [November 11, 2022, 7:33pm UTC](https://developer.squareup.com/forums/t/urgent-cc-card-fields-not-shown-with-x-frame-options-to-sameorigin-error/7513/14 "2022-11-11T19:33:08Z")

</div>

OK, I am a Developer/Consultant/Vender. If the notifications go to the store owner I will never know.  
How can I get these messages?  
Can you send them to registered emails in THE DEVELOPER FORUM so developers get notified. This information is much more relevant to developers than store owners who have no idea what it means.

---

<div class="post-metadata">

**Author:** ![Bryan-Square](https://sea1.discourse-cdn.com/square/forums/user_avatar/developer.squareup.com/bryan-square/32/38_2.png) [@Bryan-Square](https://developer.squareup.com/forums/u/Bryan-Square)\
**Post date:** [November 11, 2022, 8:06pm UTC](https://developer.squareup.com/forums/t/urgent-cc-card-fields-not-shown-with-x-frame-options-to-sameorigin-error/7513/15 "2022-11-11T20:06:42Z")

</div>

We’re constantly working to improve our features based on feedback like this, so I’ll be sure to share your request to the product team. 🙂

---

<div class="post-metadata">

**Author:** ![wootmoot](https://sea1.discourse-cdn.com/square/forums/user_avatar/developer.squareup.com/wootmoot/32/21_2.png) [@wootmoot](https://developer.squareup.com/forums/u/wootmoot)\
**Post date:** [November 11, 2022, 8:18pm UTC](https://developer.squareup.com/forums/t/urgent-cc-card-fields-not-shown-with-x-frame-options-to-sameorigin-error/7513/16 "2022-11-11T20:18:57Z")

</div>

@grahamtill – I’m giving you a warning about being unprofessional. We do not tolerate trolling or insulting/derogatory comments. The whole point of these forums are to help developers on our platform.

I understand that you may be frustrated with needing migrate from SqPaymentForm to Web Payments SDK, but that doesn’t justify being unkind to the people are wanting to help you.

If we find you talking/behaving this way in our forums again, we will suspend your forum account.

---

<div class="post-metadata">

**Author:** ![SeanD](https://avatars.discourse-cdn.com/v4/letter/s/94ad74/32.png) [@SeanD](https://developer.squareup.com/forums/u/SeanD)\
**Post date:** [November 11, 2022, 8:26pm UTC](https://developer.squareup.com/forums/t/urgent-cc-card-fields-not-shown-with-x-frame-options-to-sameorigin-error/7513/17 "2022-11-11T20:26:20Z")

</div>

Another suggestion: Add a “developer email address” to the account. That would allow you to notify me through my customers account.

---

<div class="post-metadata">

**Author:** ![wootmoot](https://sea1.discourse-cdn.com/square/forums/user_avatar/developer.squareup.com/wootmoot/32/21_2.png) [@wootmoot](https://developer.squareup.com/forums/u/wootmoot)\
**Post date:** [November 11, 2022, 8:27pm UTC](https://developer.squareup.com/forums/t/urgent-cc-card-fields-not-shown-with-x-frame-options-to-sameorigin-error/7513/18 "2022-11-11T20:27:54Z")

</div>

Which video are you referring to here? Just so I can take a look at which one might need to be updated.

This video should be up-to-date, since it follows our Web Payments Quickstart example application. [Sandbox 101: End to End Payments with Web Payments SDK - YouTube](https://youtu.be/SymdOPCGvq4)

Is this the one you’re thinking is wrong? [Sandbox 101: Web Payments SDK - YouTube](https://youtu.be/DNMXYO9JjGU)

---

<div class="post-metadata">

**Author:** ![SeanD](https://avatars.discourse-cdn.com/v4/letter/s/94ad74/32.png) [@SeanD](https://developer.squareup.com/forums/u/SeanD)\
**Post date:** [November 11, 2022, 8:37pm UTC](https://developer.squareup.com/forums/t/urgent-cc-card-fields-not-shown-with-x-frame-options-to-sameorigin-error/7513/19 "2022-11-11T20:37:55Z")

</div>

If this was directed at me I am not at all frustrated with your need to move forward with new APIs and retire old ones. If anything it is a benefit to me.  
I am however infuriated that I can’t get notified (without paying for a store account) when your changes are going to take down my customers’ web sites.

Added to that frustration, I share the frustration with many others that there is no way to actually talk to developer support in an emergency - even for a fee. I had to get another developer to notify what the problem was.

Are those comments in any way unprofessional, trolling or insulting/derogatory? They are just 2 factual statements that point out deficiencies in Square’s Developer Support. That is not the same thing.

Have a nice day.

---

<div class="post-metadata">

**Author:** ![wootmoot](https://sea1.discourse-cdn.com/square/forums/user_avatar/developer.squareup.com/wootmoot/32/21_2.png) [@wootmoot](https://developer.squareup.com/forums/u/wootmoot)\
**Post date:** [November 11, 2022, 8:43pm UTC](https://developer.squareup.com/forums/t/urgent-cc-card-fields-not-shown-with-x-frame-options-to-sameorigin-error/7513/21 "2022-11-11T20:43:48Z")

</div>

@SeanD - no that warning was not directed at you, it was directed at someone else. I sent a separate message directed at you regarding the videos that you said were incorrect, since I wanted to go check which ones might need to be updated. I already flagged the post by another user that I found to be unprofessional towards another community member.

---

<div class="post-metadata">

**Author:** ![Bryan-Square](https://sea1.discourse-cdn.com/square/forums/user_avatar/developer.squareup.com/bryan-square/32/38_2.png) [@Bryan-Square](https://developer.squareup.com/forums/u/Bryan-Square)\
**Post date:** [November 11, 2022, 8:46pm UTC](https://developer.squareup.com/forums/t/urgent-cc-card-fields-not-shown-with-x-frame-options-to-sameorigin-error/7513/22 "2022-11-11T20:46:49Z")

</div>

@SeanD Having a Square account is free. You shouldn’t be charged for anything unless you’re subscribed to product. If you have a Square account you’ll get notifications for things like this. 🙂

[Next page](https://developer.squareup.com/forums/t/urgent-cc-card-fields-not-shown-with-x-frame-options-to-sameorigin-error/7513.md?page=2)
