fix:csp changes to accept iframes from or for selected websites

[tomobre]

…and viceversa

[yougotwill]

Closing because we have decided to just link to the relevant web page instead of embedding an iframe.