We have a requirement to embed external application into Pega UI. To start as a POC, I have embedded gmail into an iframe(Non-Autogenerated section). I know this is not a best practice but its a client requirement.
When I launched the case, it was throwing some exception "mail.google.com refused to connect. I created one
Content Security Policy and enabled Child Frame-Source to Allow-All. Still I am getting the same error. When I tried to see the developer console, it was showing the below error.
chromewebdata/:1 Refused to display 'https://mail.google.com/' in a frame because it set 'X-Frame-Options' to 'sameorigin'.