Only allow iframe embedding on same origin.
Incompatibility notice on iframe embedding
Merge pull request #6120 from rgbkrk/no_iframe_embedding

Only allow iframe embedding on same origin by default.