Bug 912885 - use innerHTML instead of a data-url to inject attachments into iframes r=kaze