D3 Chart loaded via iframe (protected)

The iframe below loads its content from a Cloudflare Worker at https://YOUR_DOMAIN/embed-chart. Opening that URL directly should be blocked.

Try opening the iframe URL directly in a new tab — it should show a "Forbidden" message. But when embedded here, it renders the chart.