Gravity Rail widget-domain test host

Ephemeral debugging page for the Leapcure widget-embed investigation (2026-08-06).

This host

Origin
Verified domain
Allow subdomains
Expected

Operator widget — inline mode

The button below is the real embed. Inline mode renders a labelled trigger in the page flow that opens the Operator slide-in panel.


         

Direct iframe probe (diagnostic)

Same widget document, framed directly with no loader — so a block is visible without clicking anything. If this host is allowed, the Operator UI renders below. If not, the frame stays blank and the console shows the CSP frame-ancestors error (or a 403 from the origin gate).