#lazcorpWhile failing to solve Kupietz's embed problem yesterday, I realised another problem with using iframes for embeds - it's not just the embedded-content-owner's CSP rules that need opening up, but also those on the site that is embedding the content