[regression] iframe embedding broken with allowed src domain

Product Support
18

For me I think the biggest source of confusion was the fact that it’s called a “domain” when it’s actually a URL.
https://github.com/discourse/discourse/pull/28997