change url to check is iframe allowed