Box embed generates iframe code with a seemingly unrelated query attached:

"<iframe src="http...ig?sortColumn=date">

When used as given by box the iframe won't render and I get the following error:

"Refused to frame 'https://notes.services.box.com/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors https://app.box.com"."

If I remove the query the note will load but I am unable to edit the embedded note.

How do I embed a note that is editable by anyone with access to the file?