In Looker, the Embed page in the Platform section of the Admin menu lets you configure settings for embedded Looker content.

Embedded Domain Allowlist / Whitelist
In the Embedded Domain Allowlist, enter the domain upon which this macro is hosted.
Enter the following domain:
https://www.embedin.app
Aside: A list of all domains used by David Simpson Apps is available at https://dsapps.dev/policies/domains/.
Same-Origin Protections for Looker Login Pages
Though public embeds are fully supported, this macro assumes that the URL will be a private embed.
If the user has not already logged in, the Looker URL screen will be displayed within the page in the macro.
Using same-origin protections for your Looker login pages might prevent you from seeing the login screen for private embeds.
If this is causing any problems, set Same-Origin Protections for Looker Login Pages to Enabled.