Whether your site is static or dynamic doesn't changes anything: you still have to expose content to your users. Furthermore, any good browser will respect [Co

Whether your site is static or dynamic doesn't changes anything: you still have to expose content to your users. Furthermore, any good browser will respect [Content Security Policies](https://developer.mozilla.org/en-US/docs/Web/Security/CSP/CSP_policy_directives#frame-ancestors https://developer.mozilla.org/en-US/docs/Web/Security/CSP/CS...) and not load frames to your website.