Under Advanced Settings, see the "Bind to Domain" option

This setting should contain the list of valid URIs in which MetaLocator should allow your Interface to be IFRAME'd.

For example,

https://yourwebsite.com https://yourdevelopmentwebsite.com

Results in the following CSP:

MetaLocator domains are automatically appended to the allowed frame-ancestors.

The sites should be space-delimited, and should only contain protocol and domain information.

Be sure any variations on your domain, (such as with and without www) are listed.

Do not include path or query string information (E.g. yourwebsite.com/mytestpage.html)