tao-shen's picture
fix: allow HuggingFace Spaces iframe embedding (cookies, CSP, CSRF)
d1ade07