It would work, if there weren't content security rules