This page is hosted on *.pages.dev and iframes app.weavy.ai.
CSP frame-ancestors allows *.pages.dev — the iframe loads without violation.
All outbound postMessage calls use targetOrigin="*" — messages arrive here.
Messages captured: 0
Iframe status: Loading...