fix for #223

I added a fix for the iframe behavior issue in #223

Because this fix involves iframes I created a separate test model ( iframe.html and runner_iframeTests.html ) in order for the junit test to work.

Also, this fix checks to make sure both the parent and iframe are on the same domain, to ensure that there are no violations of the same-origin XSS policy.