cross domains work using github as the Apple Product page and google drive as the iFrame source