Relativise url. Get hostname from a map.
Construct correct viewer url
Better concatenation
Merge pull request #2272 from guardian/xss-iframe

Prevent XSS iframe exploit