Fix iframe security issues