임베드 컨트롤러에서 잘못된 응답 헤더가 설정되고 있습니다

[Falco]

이제 수정되었습니다:

Mitigate XSS Attacks with Content Security Policy

We just landed support for CSP frame-ancestors directive. It’s disabled by default for now behind the content security policy frame ancestors site setting. You can add domains to the list using via /admin/customize/embedding as always. This directive will be enabled by default in the next release cycle.