1. SAP Help Portal
SAP Build Work Zone
advanced edition Documentation: "Web Content Card". This document explicitly discusses the security requirements for embedding content
stating
"To embed content in an iFrame
the content provider must allow their content to be embedded. They do this by setting the Content-Security-Policy frame-ancestors directive or the X-Frame-Options HTTP response header." This directly confirms the use of an iFrame.
2. SAP Help Portal
UI Integration Cards Documentation: "Web Page Card". The Web Content Card is a manifestation of a UI Integration Card of the "WebPage" type. The documentation for this card type specifies that it "displays a web page in an iframe." This provides foundational evidence from the underlying technology.