Github user mebelousov commented on the issue:
https://github.com/apache/zeppelin/pull/3141
@atomicpages thank you!
How CSP header works simultaneously with X-Frame-Option?
What if I want to allow content in iframes from more than one server?---
