test: small change to avoid injecting code into iframe