尝试删除https并添加子域，如

try to remove https and add subdomain like

add_header Content-Security-Policy "frame-src 'self' www.salesforce.com;"