Add whitelist for CSP issues. Testing nested iframe solution.