X-Frame-Options ALLOW-FROM is set but there is no CSP frame-ancestors entry.