the iframe does not need src, and we should attach the onload event after it is appended to body, otherwise it will be destroyed immediately