only allow tag img and iframe on preprocess of product detail