[iframely.js] add whitelist param to data request