Prevent cross-frame script injection in old IE.