JS iframes can't load resources from a domain different than the one from the bootstrap