diff --git a/examples/todos/native-appearance-contract.test.ts b/examples/todos/native-appearance-contract.test.ts
index 455dd3e..eaa146c 100644
--- a/examples/todos/native-appearance-contract.test.ts
+++ b/examples/todos/native-appearance-contract.test.ts
@@ -103,7 +103,7 @@ test("parking document is a finite scriptless sandbox at the exact owned loopbac
   for (const port of [80, NaN, 5519.5, 65536]) expect(() => todoNativeParkUrl(port)).toThrow();
   const response = todoNativeParkResponse();
   expect(response.status).toBe(200);
-  expect(response.headers.get("content-security-policy")).toBe("default-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; sandbox");
+  expect(response.headers.get("content-security-policy")).toBe("default-src 'none'; base-uri 'none'; form-action 'none'; sandbox");
   expect(response.headers.get("cache-control")).toBe("no-store");
   expect(response.headers.get("x-content-type-options")).toBe("nosniff");
   expect(response.headers.get("content-type")).toBe("text/html; charset=utf-8");
diff --git a/examples/todos/native-appearance-contract.ts b/examples/todos/native-appearance-contract.ts
index 82b01b0..2bfe154 100644
--- a/examples/todos/native-appearance-contract.ts
+++ b/examples/todos/native-appearance-contract.ts
@@ -23,7 +23,7 @@ export function todoNativeParkResponse(): Response {
   return new Response('<!doctype html><html><head><meta charset="utf-8"><title>Verification parking</title></head><body></body></html>', {
     headers: {
       "content-type": "text/html; charset=utf-8", "cache-control": "no-store", "x-content-type-options": "nosniff",
-      "content-security-policy": "default-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; sandbox",
+      "content-security-policy": "default-src 'none'; base-uri 'none'; form-action 'none'; sandbox",
     },
   });
 }