Choose the directive to relax the rules for.

• frame-ancestors controls which sites can embed Jenkins in a frame or iframe.
• form-action controls which URLs can be used as the target of form submissions.