title: Ancestor violates the following Content Security for spotify
body: <p>Basically I am trying to javascript to add spotify iframes to my html but i keep getting this error and get this error for every link</p>
  
  <pre><code>*Refused to display 'https://open.spotify.com/album/5yc5YwQjqcNvGiFsTM0aAT' in a frame because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'none'".*
  </code></pre>
  
  <p>Then i added </p>
  
  <pre><code>&lt;meta http-equiv="Content-Security-Policy" content="child-src https://open.spotify.com/"&gt;
  </code></pre>
  
  <p>to the header but still no luck</p>
  
  <pre><code>    var SpotifyWebApi = require('spotify-web-api-node');
       function getSpotify(artist){
      var spotify = new SpotifyWebApi({
          clientId: 'xxxxxxxxxxx',
          clientSecret: 'xxxxxxxxxxxxxxx',
          redirectUri: 'http://www.example.com/callback'
      });
      spotify = new SpotifyWebApi({
      accessToken: 'xxxxxxxxxxxxxxxxxxxxxx'
      });
      const spotifyDiv = document.createElement("div")
      const result = document.getElementById("result");
      spotifyDiv.className="spotify";
      spotify.searchAlbums(`artist:${artist}`).then(
          (data)=&gt; {
              console.log(data.body)
           data.body.albums.items.forEach((album) =&gt;{
               const iframe = document.createElement("iframe");
               iframe.src=album.external_urls.spotify;
               iframe.height = 300;
               iframe.width =300;
               iframe.frameBorder =0;
               iframe.setAttribute("allowtransparency","true");
               iframe.setAttribute("allow","encrypted-media");
               spotifyDiv.appendChild(iframe)
               console.log(iframe)
  
            });
  
  
          }).catch((error)=&gt;{
              console.log(error);
  
          })
      result.appendChild(spotifyDiv)
  
  }
  </code></pre>