feat: enable iframe embedding by injecting a preload script to strip security headers and update CSP policies 40855ff somratpro commited on Apr 2