removed iframe from unsafe list