0
The issue was that i needed to set the header X-Frame-Options: ALLOW-FROM https://example.com/
Weird thing is that the code was executed, it was just not visible. And other browsers don’t seem to bother that since there was no X-Frame-Options
that blocked it.
Source:stackexchange.com