Added changes to insert iframe in the head tag. Can use CSRFT now with it.