CSP 1.1: Reformulate the 'frame-ancestors' definition.

The new definition more clearly points out the algorithm necessary for
processing this header when loading a protected resource. It also
defines mitigations for potential state leakage cross-origin.