Update status of XFO: allow-from, add 'frame-ancestors' of CSP 1.1