Handle iframe.src with a javascript: URL.

This doesn't yet run the JavaScript, but just assumes it returns
void. This seems to be the common pattern. This change prevents us from
crashing on Amazon and other pages with iframe.src="javascript:foo".