crossFrameSafe default to false

made false the default