CSP: 'frame-ancestors' should not include path components.