fix when iframe not in same domain