New Universal Login Support for IFrames (Office Addin Authentication)

Is there updates to this? It’d be great if we can specify the domain(s) which are returned in frame-ancestors directive, as suggested by g.feiken. This would be a great compromise between security and flexibility.