By enabling a Content Security Policy limiting iframe sources, Facebook has broken all custom page tabs.<p>Bug reports have gone unanswered for a month.<p>https://developers.facebook.com/support/bugs/593062641823417/<p>https://developers.facebook.com/support/bugs/268717971719721/