ok, the content security policy of https://aroace.space/GEORGE contains frame-src john.citrons.xyz; which is blocking the GEORGE navbar iframe. you should add george.gh0.pw to it.