When the user embeds a URL via HTML Content in the dashboard, sometimes the website fails to render and instead the error message “xxx refused to connect” appears. For example:
If open the browser’s Developer Tool, also see the same error in the Console tab “Refused to frame ‘<url>’ because an ancestor violates the following Content Security Policy directive:” frame-ancestors ‘self’”:
This is the expected behavior. If the Content Security Policy is set to frame-ancestors ‘self’, it means this website is only allowed to be embedded in the same origin. The owner of the website manages this and it is out of Strategy's control.
