You must ensure the URL contains embed rather watch as the
/embed endpoint allows outside requests, whereas the /watch endpoint
does not.
<iframe width="420" height="315" src="https://www.youtube.com/embed/A6XUVjK9W4o" frameborder="0" allowfullscreen></iframe>