This frame should not be blocked by Content-Security-Policy.