title: Facebook chat plugin doesn't load because of CSP rule
body: <p>I am trying to integrate the Facebook customer chat widget:</p>
  
  <pre><code>&lt;div class="fb-customerchat" page_id="{{ fb_app_id }}" minimized="true"&gt;&lt;/div&gt;
  </code></pre>
  
  <p>But it doesn't load, I've got the following error:</p>
  
  <p>Chrome:</p>
  
  <blockquote>
    <p>Refused to display '<a href="https://www.facebook.com/v2.11/plugins/customerchat.php?app_id=APPID&amp;channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FlY4eZXm_YWu.js%3Fversion%3D42%23cb%3Df108c14525cffd8%26domain%3Dtokeeen.com%26origin%3Dhttps%253A%252F%252Ftokeeen.com%252Ff21c2952e6dd8fc%26relation%3Dparent.parent&amp;container_width=0&amp;locale=fr_FR&amp;minimized=true&amp;page_id=APPID&amp;sdk=joey" rel="nofollow noreferrer">https://www.facebook.com/v2.11/plugins/customerchat.php?app_id=APPID&amp;channel=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FlY4eZXm_YWu.js%3Fversion%3D42%23cb%3Df108c14525cffd8%26domain%3Dtokeeen.com%26origin%3Dhttps%253A%252F%252Ftokeeen.com%252Ff21c2952e6dd8fc%26relation%3Dparent.parent&amp;container_width=0&amp;locale=fr_FR&amp;minimized=true&amp;page_id=APPID&amp;sdk=joey</a>' in a frame because an ancestor violates the following Content Security Policy directive: "frame-ancestors <a href="https://www.facebook.com" rel="nofollow noreferrer">https://www.facebook.com</a>".</p>
  </blockquote>
  
  <p>Firefox:</p>
  
  <blockquote>
    <p>Content Security Policy: « x-frame-options » ignoré en raison de la directive « frame-ancestors ».</p>
  </blockquote>
  
  <p>I have whitelisted the tokeeen.com domain. So I don't why I have this error. Error can been <a href="https://tokeeen.com/fr/contact" rel="nofollow noreferrer">on this page</a>.</p>
  
  <p><a href="https://i.stack.imgur.com/GcQK9.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/GcQK9.png" alt="Facebook page whitelist"></a></p>