<head> <meta http-equiv="Content-Security-Policy" content="frame-src http://localhost:5173/"> </head> <div class="fullscreen-container"> <iframe id="iframe" src="http://localhost:5173/"></iframe> </div>