firefox-devtools
Allow embedding the profiler with iframe?
I'm trying to use the https://profiler.firefox.com/from-post-message/ endpoint to embed the profiler in an VS Code extension. The API seems to have been designed for iframe usage (see https://github.com/firefox-devtools/profiler/pull/4835#discussion_r1428325004).
Though, actually embedding the url in an iframe is blocked with Content-Security-Policy frame-ancestors 'self';
https://github.com/firefox-devtools/profiler/blob/117004218dc337d7f3d6e3f8eff2a53b9ea68838/server.js#L62
https://github.com/firefox-devtools/profiler/blob/117004218dc337d7f3d6e3f8eff2a53b9ea68838/res/_headers#L28
Is this by design? Can we change this to allow others embedding the profiler in an iframe?
┆Issue is synchronized with this Jira Task
