Cannot embed using the provided iframe on https://dotnet.microsoft.com/platform/try-dotnet

Describe the bug

If I try to embed try .net with this iframe (taken from https://dotnet.microsoft.com/platform/try-dotnet):

<h2>Fibonacci Generator</h2>
<p>Here is my example of a Fibonacci generator implemented in C#.</p>

<iframe src="https://try.dot.net/?fromGist=df44833326fcc575e8169fccb9d41fc7">
</iframe>

You get Content Security Policy errors. It doesn’t work out of the box and its not clear how to fix this. It should be possible somehow as some ppl are using it but a example should work without having to fix it.

Did this error occur while using dotnet try or online?

• dotnet-try
• online

What kind of error was it?

• User Interface (UI): For example the output never displayed
• Service Error: For example “The service is temporarily unavailable. We are working on it”
• Other:

Screenshots

If applicable, add screenshots to help explain your problem.

Please complete the following:

• OS
  • Windows 10
  • macOS
  • Linux (Please specify distro)
  • iOS
  • Android
• Browser
  • Chrome
  • Edge
  • Safari

[Barsonax]

In the meantime you should make this clear as the current info is misleading. Would have saved me alot of time.

[jonsequitur]

@Barsonax There’s a decent amount of work that needs to be done beyond removing the IFRAME restriction before embedding is all that useful, which is why we haven’t done it yet.

1. You need a way to a) create a project against which the Try .NET service compiles code submissions, responds to intellisense requests, etc., so you can create samples using the NuGet packages of your choice, and b) create a custom Blazor app that Try .NET delivers to users’ browsers, where the compiled user code is executed. (The tool to do these things is dotnet try pack, but the feature isn’t where we want it yet.)

2. Those artifacts need to be publishable, securely, to the Try .NET backend.

3. Then we can remove the restriction.