If the CSP works, you won't see an iframe load below: