Added allow-scripts to iframe