Under Advanced Settings, see the "Bind to Domain" option
This setting should contain the list of valid URIs in which MetaLocator should allow your Interface to be IFRAME'd.
Results in the following CSP:
MetaLocator domains are automatically appended to the allowed frame-ancestors.
The sites should be space-delimited, and should only contain protocol and domain information.
Be sure any variations on your domain, (such as with and without www) are listed.
Do not include path or query string information (E.g. yourwebsite.com/mytestpage.html)