Cross-Origin-Opener-Policy policy would block the window.postMessage call.

[Luna-omni]

Hello, first of all, thank you for your amazing library. I have a question. When I click to authorize a user, I encountered the following messages.

Cross-Origin-Opener-Policy policy would block the window.postMessage call. client:275 Cross-Origin-Opener-Policy policy would block the window.closed call.

I googled it and added the code below to my index.html, but it did not work.

<meta http-equiv="Content-Security-Policy" content="frame-src https://accounts.google.com/gsi/;" />

Could you help me?