title: Refused to display in a frame
body: <p>I am using an iframe to show a calendar on it. But I keep getting the following; </p>
  
  <blockquote>
    <p>Refused to display '<a href="https://cal.mixmax.com/user1" rel="nofollow noreferrer">https://cal.mixmax.com/user1</a>' in a frame because
    an ancestor violates the following Content Security Policy directive:
    "frame-ancestors 'self' <a href="https://mail.google.com" rel="nofollow noreferrer">https://mail.google.com</a>
    <a href="https://inbox.google.com" rel="nofollow noreferrer">https://inbox.google.com</a> https://<em>.force.com https://</em>.mixmax.com".</p>
  </blockquote>
  
  <p>I tried to have the meta for Content-Security-Policy as the following but no luck.</p>
  
  <pre><code>&lt;meta http-equiv="Content-Security-Policy" 
        content="frame-ancestors 'self' 
        https://mail.google.com 
        https://inbox.google.com 
        https://*.force.com 
        https://*.mixmax.com"&gt;
  </code></pre>
  
  <p>Any idea how to overcome it?</p>