Content-Security-Policy: frame-src https://docs.google.com https://docs.googleusercontent.com https://www.google.com;