When I add code to a page like an iframe it triggers the security measures

Website, Application, Performance
1

When I add code to a page like an iframe it triggers the security measures. I can see my IP in the report. It results in a JSON error in WP

Has anyone come across this in Cloudflare before?