XSS worm on my InfinityFree site?

The system blocks clients that is not a browser. When other websites need to generate an embed for you, they need to fetch some data of your website by making a request. Most of these times these websites make a request with simple tools that is not a browser, so cannot run JavaScript or accept cookies. So the system blocks these.