[bugfix]: iframe source constructed using site_url