Default frame-src to self