Fixes a XSS vulnerability in the frame-loader.js