Why does my embedded app still redirect despite following iframe protection settings?

[Y_abregu]

Hello,

My app follows the iframe protection settings, but still redirects with force_legacy_domain=1

Is there an extra step I need to take?