Google in June will block sign-ins from embedded browser frameworks. Embedded browser frameworks are used with some forms of phishing attacks. An adversary running a phishing attack can use an embedded browser framework to execute JavaScript on a page and automate user activity. This measure affects developers who lose an easy way to offer authentication in their apps. A recommended alternative is to use browser-based OAuth authentication, which allows sharing login data while keeping the username and password safe. Google announced in October 2018 that JavaScript should be enabled in the browser when signing into Google services.
Source: https://www.bleepingcomputer.com/news/security/google-to-block-logins-from-embedded-browser-frameworks/

