Why I'm receiving an CSP frame-src error even if I'm passing rules?

Question

I'm receiving the error:

Refused to frame 'https://oauth.telegram.org/' because it violates the following Content Security Policy directive: "frame-src https://outh.telegram.org"

I have set my content security policy rules correctly I believe. Why is it still blocked?

Answer 1

Ok, I found a solution.

I have added *.telegram.org rule and it worked. I don't know why the previous rule was not accurate but anyway the second try worked.