Embed within iframe (Refused to frame 'https://new.express.adobe.com/' because an ancestor viola…)

[@getflourish]

I’m trying to use the embed within an app that’s rendered in an iframe. I added the embedding domain to the allowed domains, but still get this error:

> Refused to frame 'https://new.express.adobe.com/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'self' [REDACTED].com".

[nhung.ng]

Hello, we are having the same issue. Any update on this? Or have you found any solution to deal with this one?  

[freked]

Hey @Barranca maybe you know something about this scenario? 🙂 I believe the main issue is that the CSP policy only seems to fetch one domain at a time? But I was also checking the setup of your demo site https://demo.expressembed.com and it actually allows for multiple domains at once. Are you doing something special there?