Embed test for app.pixally.com/guest-view/*. Backend sends content-security-policy: frame-ancestors *; and no X-Frame-Options, so this page is allowed to frame it.