Hyperlink to github page.
Go to: Cloudflare → Rules → Transform Rules → Modify Response Header
Add 2 rules:
-
Remove header Name: X-Frame-Options
-
Set header (overwrite, NOT add) Name: Content-Security-Policy Value: frame-ancestors *
Apply to: *.yourdomain.com
Then:
- Purge cache
- Hard refresh
Done.