Refused to display 'liferay-url' in a frame because it set 'X-Frame-Options' to 'sameorigin'.
Liferay does not allow access to any of its url using iframe if the request is coming from different domain. If the domain is same you will be able to access Liferay url using iframe.
As you know development approach has been completely changed with Liferay DXP. In older version of Liferay it was easy to include static resource like CSS , JS and Images as part of portlet but with Liferay DXP you have to do few additional changes to include them.
You can include out of box as well as custom portlet inside theme in Liferay dxp but way has been changed.
While doing development in Liferay DXP your module may depends on external jar files . If required jar file is available in Liferay Nexus Repository then you can include them by using BND and Gradle file.