Why does the extension swear on the iframe?

Question

JavaScript

I want to add an iframe to the background to listen to music from youtube (as far as I understand, there is hardly anything better than this)
But when adding an iframe to the code. It turns out this error:

A cookie associated with a cross-site resource at http://youtube.com/ was set without the `SameSite` attribute. It has been blocked, as Chrome now only delivers cookies with cross-site requests if they are set with `SameSite=None` and `Secure`

When adding the same frame to localhost, everything is fine.
The csp manifest is written like this:

"content_security_policy": "script-src 'self' 'unsafe-eval'; object-src 'self'; frame-src 'self' https://www.youtube.com/;"

Frame:

<iframe width="400" height="300" src="https://www.youtube.com/embed/9Ht5RZpzPqw" allow="encrypted-media" allowfullscreen=""></iframe>

Answer 1

Add a response header
response.setHeader("Set-Cookie", "HttpOnly;Secure;SameSite=Strict");