Content Security Policy directive frame-src

Question

I render page like this from my jetty container. I see a javascript error message "Refused to frame \'https://www.google.com/\' because it violates the following Content Se