Bazel.build's feedback button is broken

### Description of the bug:

Trying to leave feedback via the documentation's page send feedback button gives me errors saying

> www.google.com refused to connect.

From the console I get the following:

```
Framing 'https://www.google.com/' violates the following Content Security Policy directive: "frame-ancestors https://*.google.com *.g235.com *.googleplex.com *.sandbox-freebase.com freebase.com www.freebase.com www.panoramio.com panoramio.com test pcon b youtube-capture.appspot.com gkmass campaign-reporter.appspot.com *.googlegoro.com *.google.org *.402-bslatkin-staging.appspot.com *.402.appspot.com *.402-trial2.appspot.com gmailblog.blogspot.com www.schemer.com schemer.com *.borg.google.com *.glass.ext.google.com *.doubleclick.net *.corp.google.com *.proxy.googleprod.com *.c.googlers.com *.proxy.googlers.com *.wesolveforx.com *.lanternal.com temporal-falcon-651.appspot.com staging-dot-googleplaces.appspot.com raja-portico.appspot.com ita-reports.appspot.com reports.itasoftware.com bbx-data.itasoftware.com bbx-demo.itasoftware.com qpx-explore-demo.itasoftware.com developer.chrome.com *.wildfireapp.com *.wildfirestaging.com www.raterhub.com raterhub.com raterhub.appspot.com analyticsacademy.withgoogle.com analytics-academy.appspot.com 77-dot-analytics-academy.appspot.com analytics.google.com analytics.corp.google.com analytics-preprod.corp.google.com analytics-integration.corp.google.com partner-security.withgoogle.com vendor-security.appspot.com glassware-flow-designer.appspot.com ee-api.appspot.com go-tee.appspot.com staging-dot-go-tee.appspot.com apps-admin-course.appspot.com admin-training.googleapps.com app.google.stackdriver.com app.stackdriver.com matrix.itasoftware.com gmeet.net www.gmeet.net greenlight.google greenlight.corp.google.com greenlight-prod.corp.google.com greenlight-staging.corp.google.com greenlight-dev.corp.google.com *.admob.com youtube-insights.appspot.com yourideas-localization.appspot.com ytkenobi.appspot.com ytkenobi-stg.appspot.com ytkenobi-qa.appspot.com creatoracademy.withgoogle.com vrlr-fr.appspot.com dev-v4-dot-gweb-edu-training-center.appspot.com edutrainingcenter.withgoogle.com maps-dashboard.appspot.com academy-prod.appspot.com learn.googleapps.com stage-dot-cloud-datalab-deploy.appspot.com www.youtube-creatorcommunity.com stage.youtube-creatorcommunity.com unify.my.salesforce.com unify--c.na4.visual.force.com angular.io h5validator.appspot.com hashcodejudge.withgoogle.com hashcode-judge.appspot.com glearning-resources.appspot.com unfiltered.news retail-diva.appspot.com crossmediapanel.com www.crossmediapanel.com biz.waze.com biz.waze.co.il biz.world.waze.com biz-il.waze.com *.speed.googlefiber.net speed.googlefiber.net chrome-extension://dicalmaccnjeodaggoiejacibdoelcem chrome-extension://jmokpnjghacpkddenfmlannfocomdhak chrome-untrusted://lens chrome-extension://pkedcjkdefgpdelpbcmbmeomcjbeemfm chrome-extension://enhhojjnijigcajfphajepfemndkmdlo chrome-extension://embmhklhpdngbonenngaocmckhihpbfc chrome-extension://oobcpcjenkpfbjceepfmgfefijiaifec chrome-extension://adokjfanaflbkibffcbhihgihpgijcei chrome-extension://oocndahcfdbghanpjmmkpkbjfpmbhmnc chrome-extension://ghkcldfjgkkkgafpknpciimfjbpebgke chrome-extension://ochgilmnijpmckopfoaecjfnodghbkik chrome-extension://bnmgbcehmiinmmlmepibeeflglhbhlea chrome-extension://ifnghjflmijkgaapkamfoeponhbimcll chrome-extension://dlkmbcafmfimgmdmijklaicnhfllmcdh canary-dot-vrlr-fr.appspot.com chronicle-staging.googleplex.com nightly-dot-chronicle-staging.googleplex.com *.terrabella.com maps-onboarding.appspot.com *.android-device-health.appspot.com cseduapplication.withgoogle.com servicesdirectory.withyoutube.com youtube-video-checkup-dogfood.appspot.com plus.codes plus-codes.appspot.com *.dartlang.org conversationai-website.appspot.com alpha-dot-kintaro-content-server.appspot.com kintaro-content-server.appspot.com kintaro-content-server-qa.appspot.com kintaro-content-server-staging.appspot.com tiltbrush.com academy.exceedlms.com google.exceedlms.com full-youtubespace.cs14.force.com hubbledev-youtubespace.cs30.force.com youtubespace.force.com qiblafinder.withgoogle.com developers.nest.com testtracker.googleplex.com testtracker-dev.googleplex.com material.io mio-components.googleplex.com custom-vision-dev.appspot.com custom-vision-test.appspot.com custom-vision-staging.appspot.com custom-vision.appspot.com custom-translation.appspot.com custom-natural-language.appspot.com daydream-discovery.appspot.com *.devshell.appspot.com yondo.area120.com residents.surgicalinsights.com staging.surgicalinsights.com openthread.io lamarr-external.appspot.com lamarr-planner.appspot.com *.apigee.com touringbird.area120.com www.touringbird.com oort-req.googleplex.com gweb-gfw-oort-staging.appspot.com 7486-dot-defjam-dev.appspot.com defjam-dev.appspot.com defjam-staging.appspot.com events.withgoogle.com reply.app cs.chromium.org openweave.io vsaq-wizard.googleplex.com walkthroughs.googleusercontent.com drive.google.com drive.sandbox.google.com insights.sustainability.google bracket-environment-eip.appspot.com blueprint360-qa.appspot.com blueprint-gmp.appspot.com googlepartners.lightning.force.com/ docs.orbitera.com partnermarketinghub.withgoogle.com
```

### Which category does this issue belong to?

Documentation

### What's the simplest, easiest way to reproduce this bug? Please provide a minimal example if possible.

Click on send feedback button in upper right of center content on https://bazel.build/rules/lib/repo/http

### Which operating system are you running Bazel on?

N/A

### What is the output of `bazel info release`?

N/A

### If `bazel info release` returns `development version` or `(@non-git)`, tell us how you built Bazel.

N/A

### What's the output of `git remote get-url origin; git rev-parse HEAD` ?

```text
N/A
```

### If this is a regression, please try to identify the Bazel commit where the bug was introduced with bazelisk --bisect.

N/A

### Have you found anything relevant by searching the web?

Didn't look.

### Any other information, logs, or outputs that you want to share?

No.

Open https://bazel.build/rules/lib/repo/http and click the Send feedback button while watching the browser console. Trace the documentation page's feedback-button integration and its Content Security Policy behavior; done means the feedback interface opens without the reported refused-to-connect or framing error.

Written by the indexing model from the issue text.