Blocked by X-Frame-Options Policy

[vikaspotluri123]

@nycmits I’m going to reference a comment I made earlier because you’re doing the same thing. tl;dr you need to configure one domain to redirect all traffic to the other domain

Ghost seems to violate my CSP policy?

You’ve upgraded from Ghost 1.x to 3.x, and there have been a lot of changes since then, one of them being improved handling of local URLs. I’m guessing that might be what’s “breaking” for you. You shouldn’t be serving the same content across multiple domains because it creates duplicity issues when search engines crawl your pages. Your best bet is to choose 1 and redirect all traffic to that domain.