fix iframe domain check