[AOC] Activation of security policy to not allow the use of signador.aoc.cat in an iframe