change iframe script access