Iframe api origin protocol Untrusted origin (jsapi enabled)

Now the Youtube iframe API origin parameter needs the protocol from the url according to the official documentation:

As an extra security measure, you should also include the origin parameter to the URL, specifying the URL scheme (http:// or https://) and full domain of your host page as the parameter value. While origin is optional, including it protects against malicious third-party JavaScript being injected into your page and hijacking control of your YouTube player

Documentation.

Error:
Untrusted origin: example.com