use regex for iframe installer origin whitelist

Please add comments on https://github.com/mozilla/zamboni/pull/2614 :)