def METHOD_NAME(self):
    vis = self.factory.create_visualization()
    vis.query_rel.latest_query_data = self.factory.create_query_result()
    db.session.add(vis.query_rel)
    res = self.make_request(
        "get",
        "/embed/query/{}/visualization/{}".format(vis.query_rel.id, vis.id),
        is_json=False,
    )
    self.assertEqual(res.status_code, 200)
    self.assertIn("frame-ancestors *", res.headers["Content-Security-Policy"])
    self.assertNotIn("X-Frame-Options", res.headers)