This is an IFrame sending a Content Security Policy header containing "frame-ancestors {{GET[policy]}}".