Facebook breaks custom page tabs with security change, no response for month

By enabling a Content Security Policy limiting iframe sources, Facebook has broken all custom page tabs.

Bug reports have gone unanswered for a month.

https://developers.facebook.com/support/bugs/593062641823417/

https://developers.facebook.com/support/bugs/268717971719721/