I am embedding content in my article that are from the same domain. when I am opening my url with HTTP the embedded HTTPS content won't open and when I am opening my url with HTTPS the embedded HTTP content won't open. Same thing happen when i try to open content with localhost. I am getting this error in Firefox and Chrome:
Load denied by X-Frame-Options: http://mywebsite.com/embed/clips/sandy does not permit cross-origin framing.
OR
Refused to display 'https://mywebsite.com/embed/clips/sandy' in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'.
I installed the CORS module but it does not seems to help. In Domains (/admin/config/services/cors) I added:
*|<mirror>,https://mywebsite.com
*|<mirror>,https://mediamatters.org
without success. Any insight is apreciated.